last executing test programs: 20.971898044s ago: executing program 4 (id=1407): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'veth0_to_bond\x00', &(0x7f0000000080)=@ethtool_stats}) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYRESOCT=r1, @ANYRESOCT=r1], 0x3261e) (async, rerun: 64) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) (rerun: 64) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'wlan0\x00', 0x0}) 20.159693217s ago: executing program 4 (id=1420): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x6) ioctl$sock_bt_hci(r1, 0x400448c9, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c00000023000100800000000000000000000000050021"], 0x1c}}, 0x0) 19.783487101s ago: executing program 2 (id=1424): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x34, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), r0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000940)={0x0, 0x1f, &(0x7f0000000180)=[{&(0x7f0000000540)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0015400100142603600e1208000b0000000401a80016000800014003001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000440)={&(0x7f0000000200)={0x44, r3, 0x400, 0x7, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x28, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004050}, 0x41) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x20}}, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000340)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r1, 0x4048587b, &(0x7f0000000ac0)={{r5, &(0x7f0000000000)='\x00', 0x880, &(0x7f0000000740)={@align, {0x2, 0xfffb, 0x0, 0x33}}, 0xff, &(0x7f0000000780)={@_ha_fsid}, &(0x7f00000007c0)=0x1fd}, 0x2, &(0x7f0000000a80)=[{0x3, 0xcf, &(0x7f0000000800)='\x00', &(0x7f0000000840)="c7489d5dee7237831eb06801dff4cde0325d39886d10c7cf6b0ad0af24a99faae8a6e43dc0f0dea63d39a9cdb411229f5532e592e28f5e07cb06c29a7d8a790c29c6a465d788a32e8f2236f84fcd9051e7c036d33185a9aeae8473b8ab90ce9f0578731dfae16ff71ad8d2f2c82e385ada57105484ca1ebbc1e08292cfebb20bb014a35eba1830ded628df178bc27e2c4f90e2cb7ed4c8dd236c61441353cd37c1c3aa641e5121e4904b38a4eb690d1f399966a615f7ad03531d7970322955161d1ade2becbb43f362f37f9b75f1b5c594b89675de1a94cdb4a5e2ae6c7f5f0aed575e90590872479a3822b9ead2ac57755e0721b621", 0xf6, 0x28}, {0x3, 0xfffffff3, &(0x7f0000000980)='syzkaller\x00', &(0x7f0000000a00)="6d316a5dd9578c777fb8e957b9ab5bc59bb88836b550886c15e229b73b0e79d594ba7940a2626b83e85abf1332f6e3c40d31b49df29a484f6d6fff6dbd9b8afa58521dcc58ea61e3168c3ae1ded989deced80c92eaf0a6a84b8c1fe919fcb233abc2", 0x62, 0x30}]}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b80)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r7, &(0x7f0000000c80)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x802}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x60, r2, 0x300, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x4, 0x5}}}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x3ee}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x8e}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}, @NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xbeb}]}, 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x4090) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@ipv6_newnexthop={0x20, 0x68, 0x1, 0xfffffffc, 0xfffffffe, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x3}]}, 0x20}}, 0x0) sendmsg$nl_route(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r9, @ANYBLOB="08000100", @ANYRES32=r10], 0x90}, 0x1, 0x0, 0x0, 0x44004}, 0x0) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r12 = accept4(r6, 0x0, 0x0, 0x0) sendmsg$alg(r12, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x48814}, 0x14000012) sendmsg$nl_route_sched_retired(r12, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmmsg$unix(r12, &(0x7f00000029c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000002a00)=""/4100, 0x1004}], 0x1}}], 0x1, 0x10000, 0x0) r13 = socket(0x15, 0x5, 0x0) getsockopt(r13, 0x200000000114, 0x2720, 0x0, 0x0) close(r13) syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x4, &(0x7f00000002c0)=@framed={{}, [@generic={0x40}]}, &(0x7f0000000300)='syzkaller\x00', 0x9, 0xd0, &(0x7f0000000340)=""/208}, 0x90) 19.691026241s ago: executing program 4 (id=1426): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x51}, [@ldst={0x3, 0x0, 0x3}], {0x95, 0x0, 0x9}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0xa, 0x5}, 0x10}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETOFFLOAD(r1, 0x5421, 0x110e22fff6) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000080)={r0, r1}, 0xc) 19.499125957s ago: executing program 4 (id=1429): epoll_create(0xfffffff7) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) bind$packet(r3, &(0x7f0000000000)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @link_local}, 0x14) sendmsg$nl_route(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=@ipv4_getnetconf={0x3c, 0x52, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@NETCONFA_RP_FILTER={0x8}, @NETCONFA_IFINDEX={0x8, 0x1, r5}, @NETCONFA_PROXY_NEIGH={0x8, 0x5, 0x6b53}, @NETCONFA_PROXY_NEIGH={0x8, 0x5, 0x7f}, @NETCONFA_PROXY_NEIGH={0x8, 0x5, 0xbe1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000004000000010080020900010073797a30000000002c000000030a01040000000000000000010000010900010073797a30000000000900030073797a3200000000a4000000060a010400000000000000000100000008000b40000000007c000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020007000000440001800c0001006269747769736500340002800800034000000002080001400000001408000240000000120c00058006000100ee5700000c000480060001008a9500000900010073797a30"], 0x118}}, 0x0) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000180), 0x8) sendmsg$nl_route(r6, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=@ipv6_newroute={0x3c, 0x18, 0x10, 0x70bd2a, 0x25dfdbfc, {0xa, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfd, 0x0, 0x800}, [@RTA_PREF={0x5, 0x14, 0xff}, @RTA_PREF={0x5, 0x14, 0x7}, @RTA_IIF={0x8, 0x3, r5}, @RTA_IIF={0x8, 0x3, r5}]}, 0x3c}}, 0x8000) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2f, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x103, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 16.725584189s ago: executing program 4 (id=1432): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e640000000018000280140008800800030001"], 0x48}}, 0x0) pipe(&(0x7f0000000140)) sendmmsg$inet(r1, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000000)=0x0) bind$nfc_llcp(r0, &(0x7f0000001040)={0x27, r3, 0xfffffffe, 0x4, 0x0, 0x1, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3f}, 0x60) sendto(r0, &(0x7f00000005c0)="a1bfc48ba931fb1ceb70ba6de68925f84d607ce82b9339dda7f5adf00381be33ea1558c858be9d3a5b2aff8f4f59bd095d7034b500b19e0d0524e7bf37b4cec2aad04aacfac1eeca892aa86fe2f21df0a4619b459cb53e0cadf8e3486c5506c18326e1a39911052c19fee16f57ff67c91e3576d08cbca1dbfbdf03bc42498ba5fe9316ab4a80fdaab89a6461775b8f4f23b0f528e97eadd7ca6308c637", 0xfeca, 0x0, &(0x7f0000000700)=@ax25={{0x3, @bcast, 0x5}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x80) close(r2) 16.645248817s ago: executing program 0 (id=1434): r0 = socket(0x10, 0x803, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x17}}, &(0x7f0000000480)='GPL\x00'}, 0x90) r1 = socket$unix(0x1, 0x2, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f0000000100)=0x3, 0x4) sendto$inet6(r3, 0x0, 0x0, 0x20004184, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) (async) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000100)={'erspan0\x00', &(0x7f0000000040)=@ethtool_wolinfo={0x6, 0x7, 0x1ff, "fac16a590b17"}}) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70ad2b, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x4}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x1}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x800) r5 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xb, 0xfff2}, {}, {0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x54, 0x2, [@TCA_BASIC_ACT={0x50, 0x3, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x4, 0xffff, 0x3f, 0x2, 0x6}, 0x2}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x78, 0xfa}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x4) (async) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r5, &(0x7f0000000540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000500)={&(0x7f00000008c0)=ANY=[@ANYBLOB="34020000", @ANYRES16=r6, @ANYBLOB="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"], 0x234}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r8, &(0x7f0000000000)="fc", 0x1) (async) r9 = socket$inet_udp(0x2, 0x2, 0x0) close(r9) r10 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r10, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x6}, 0x20) (async) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000880)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001e00010000000000fedbdf2507000000", @ANYRES32=r12, @ANYBLOB="000000000a0002"], 0x28}}, 0x0) (async) connect$l2tp6(r10, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) (async) splice(r7, 0x0, r9, 0x0, 0x1100000000f336, 0x0) (async) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r13, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0xe45}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 16.62741973s ago: executing program 2 (id=1435): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) (async) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="1c0000001a00010000000000000000000a0000272d"], 0x1c}}, 0x0) (async, rerun: 64) r3 = socket$inet_sctp(0x2, 0x1, 0x84) (rerun: 64) setsockopt$inet_int(r3, 0x0, 0xa, &(0x7f0000000040)=0xc, 0x4) (async, rerun: 64) setsockopt$inet6_udp_int(r1, 0x11, 0x66, &(0x7f0000000100)=0xc6, 0x4) (async, rerun: 64) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0xfffffffd, @empty}, 0x1c) (async) syz_emit_ethernet(0xfef3, &(0x7f0000005880)=ANY=[@ANYBLOB="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", @ANYRESDEC=r1], 0x0) (async) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r4, &(0x7f0000000080)={0x24, @long={0x3, 0x3, {0xaaaaaaaaaaaa0102}}}, 0x14) (async) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000d00), r0) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000440)={0x20, r5, 0xe29, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x24040044) (async, rerun: 32) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000070000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900010073797a30000000000900030073797a3000000000140004800800024000000000080001400000000571000000060a010400000008000000000100000008000b4000000000400004803c0001800a0001006d617463680000002c0002800800010065636e000c000300e4edf2b75cc7c0a308000240000000000c000100706b7474797065000900010073797a30"], 0xf0}}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1a, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000ae000000950000000000009b"], &(0x7f0000000180)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00}, 0x94) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) recvmmsg(r4, &(0x7f0000005780)=[{{&(0x7f0000000200)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000280)=""/48, 0x30}, {&(0x7f0000000e00)=""/4096, 0x1000}], 0x2, &(0x7f0000001e40)=""/138, 0x8a}, 0x1ff}, {{&(0x7f0000001f00)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000004340)=[{&(0x7f0000001f80)=""/51, 0x33}, {&(0x7f0000001fc0)=""/4096, 0x1000}, {&(0x7f0000002fc0)=""/12, 0xc}, {&(0x7f00000002c0)=""/140, 0x8c}, {&(0x7f00000030c0)=""/86, 0x56}, {&(0x7f0000003140)=""/96, 0x60}, {&(0x7f00000031c0)=""/121, 0x79}, {&(0x7f0000003240)=""/4096, 0x1000}, {&(0x7f0000004240)=""/211, 0xd3}], 0x9, &(0x7f0000004400)=""/63, 0x3f}, 0x2}, {{&(0x7f0000004480)=@pptp={0x18, 0x2, {0x0, @dev}}, 0x80, &(0x7f0000004580)=[{&(0x7f0000004500)=""/66, 0x42}], 0x1}, 0x4}, {{&(0x7f00000045c0)=@in6={0xa, 0x0, 0x0, @initdev}, 0x80, &(0x7f0000004740)=[{&(0x7f0000004640)=""/59, 0x3b}, {&(0x7f0000004680)=""/43, 0x2b}, {&(0x7f00000046c0)=""/123, 0x7b}], 0x3, &(0x7f0000004780)=""/4096, 0x1000}, 0x59}], 0x4, 0x261, 0x0) 16.503840973s ago: executing program 1 (id=1437): ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000000300)={{0xffffffffffffffff, &(0x7f0000000000)='+$\x00', 0x80, &(0x7f0000000040)={@align=0x6, {0x81, 0x7, 0x921, 0x7}}, 0x7, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000000c0)=0xfff}, 0x2, &(0x7f00000002c0)=[{0x2, 0x6, &(0x7f0000000100)='#\'$/^}}%$\x00', &(0x7f0000000140)="ce9f0aa4cd79cf2c82bf5683c37c5fd005faf732e64582e68b21f3d3b3d31aeef30587974f91bc14866cf86cce7a65a49f526ff055e88f8f9c5128372da736ff70ba4c21057c7afc572e0cb99931e69a23c8b4101786ea26b76f8a61e4ad51bfe07d94759bbe7c2cd0395ef374ab47f865a151fcb6b63e0b0286d42c140ebaf9f4057c7d5b3d68f7be166e5542c81784a878f1fa78c5fd4c25fdd2776e1caf0add28ba319742432b9c5d58f849dacaf8db5d7d1bd5b33adaec3e26bf600109022a6f61c97be0805a369aa56ef4f1ac70c63014a80f6f069c3ea34cd714d69922b63252e6c48a", 0xe6, 0x10}, {0x1, 0x9, &(0x7f0000000240)='!@[#$\x00', &(0x7f0000000280)}]}) ioctl$XFS_IOC_FSGEOMETRY_V1(r0, 0x80705864, &(0x7f0000000380)) (async) ioctl$XFS_IOC_FSGEOMETRY(r0, 0x8100587e, &(0x7f0000000400)) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEV(r1, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, r2, 0x2, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x800) (async) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000680)={0x0, 0x5, 0x8, [0x800, 0x40, 0xb, 0x0, 0x5, 0x200, 0x4, 0x7]}, &(0x7f00000006c0)=0x18) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000700)={r4, 0x9}, &(0x7f0000000740)=0x8) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000780)=@assoc_id=r5, &(0x7f00000007c0)=0x4) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000800)={r6, @in={{0x2, 0x4e20, @empty}}, 0x5, 0x63, 0x80000001, 0xfffffff8, 0x48, 0x800, 0x2}, &(0x7f00000008c0)=0x9c) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000900)={r7, 0x8001, 0x8, [0xb, 0x7, 0x9, 0x5fa, 0xfc, 0x2, 0x5, 0x3]}, &(0x7f0000000940)=0x18) (async) r9 = socket$igmp(0x2, 0x3, 0x2) getsockopt$EBT_SO_GET_ENTRIES(r9, 0x0, 0x81, &(0x7f0000000ac0)={'filter\x00', 0x0, 0x3, 0x70, [0x80, 0x1, 0x4, 0x1, 0x10001, 0x4], 0x9, &(0x7f0000000980)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000a40)=""/112}, &(0x7f0000000b40)=0x78) (async) sendmsg$NFC_CMD_FW_DOWNLOAD(r1, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_FIRMWARE_NAME={0x6, 0x14, '($'}, @NFC_ATTR_FIRMWARE_NAME={0x5, 0x14, '+'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x85) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000cc0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_TX_POWER(r1, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x38, r2, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0xe}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x81) (async) r11 = accept4$nfc_llcp(r0, &(0x7f0000000dc0), &(0x7f0000000e40)=0x60, 0x80800) setsockopt$SO_TIMESTAMPING(r11, 0x1, 0x25, &(0x7f0000000e80)=0x40a, 0x4) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r1, &(0x7f0000001000)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x98, r2, 0x4, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_LEVEL={0x2c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x8}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x4}]}, @NL802154_ATTR_SEC_LEVEL={0x34, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x9}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x98}, 0x1, 0x0, 0x0, 0x40000}, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000001040)={r8, 0x3}, &(0x7f0000001080)=0x8) (async) ioctl$INCFS_IOC_PERMIT_FILL(r9, 0x40046721, &(0x7f00000010c0)) (async) ioctl$XFS_IOC_GOINGDOWN(r0, 0x8004587d, &(0x7f0000001100)=0x3ff) (async) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) (async) syz_emit_ethernet(0x5b, &(0x7f0000001140)={@random="977d79391f87", @remote, @val={@void, {0x8100, 0x0, 0x0, 0x4}}, {@ipv6={0x86dd, @generic={0x2, 0x6, "8031d2", 0x21, 0x62, 0x1, @empty, @private1, {[], "45b49fc4c4d11baf684f7f4b30b9faaacbe33be3f0b93362c4fded540c7d5024e0"}}}}}, 0x0) r12 = syz_genetlink_get_family_id$tipc(&(0x7f0000001200), r0) sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f00000012c0)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001280)={&(0x7f0000001240)={0x1c, r12, 0x1, 0x70bd25, 0x25dfdbfd, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000004c}, 0x0) getsockopt$EBT_SO_GET_INFO(r9, 0x0, 0x80, &(0x7f0000001300)={'filter\x00', 0x0, 0x0, 0x0, [0x8, 0xf34b, 0x5, 0x100, 0x8, 0x11]}, &(0x7f0000001380)=0x78) (async) accept4(r0, &(0x7f00000013c0)=@nl, &(0x7f0000001440)=0x80, 0x80800) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000001480)={r9, 0x48e, 0x7, 0x8000}) 16.329055029s ago: executing program 1 (id=1438): r0 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x8}, 0x18) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newrule={0x48, 0x20, 0x1, 0x70bd25, 0x25dfdbff, {0x2, 0x10, 0x20, 0xbc, 0xfa, 0x0, 0x0, 0x7, 0x5}, [@FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0xe}, @FRA_DST={0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, @FRA_SRC={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xf}}, @FRA_SRC={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @FRA_FLOW={0x8, 0xb, 0xc}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) (async) r1 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000240)=0x60) r2 = accept$nfc_llcp(r1, &(0x7f0000000280), &(0x7f0000000300)=0x60) (async) r3 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'veth0_to_hsr\x00'}) (async, rerun: 64) ioctl$sock_inet_SIOCSIFPFLAGS(r3, 0x8934, &(0x7f0000000380)={'lo\x00', 0x5}) (rerun: 64) ioctl(r0, 0x5, &(0x7f00000003c0)="c2bf3e199badc5f65b2044e278") (async) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000400)={0x2, 'ip6gre0\x00', {0x2}, 0x9ec8}) ioctl$XFS_IOC_SET_RESBLKS(r2, 0xc0105872, &(0x7f0000000440)={0xc000, 0x7ee6}) (async) ioctl(r2, 0x7, &(0x7f0000000480)="d73b9eab0123479eeab267d4a58d248f964260f6ffc363a5726a5e5d46c981e938d97cf53ab62fb21200edd24491cd27be4e7a27d709b6565a15246e890e818480da277165eb78531eefbe10c2577dd7ff53f932245a0da2266b69717c29ef65beb9a75d71ee217bb7e1b5231c87bc64ccf8cc9cc7b0d0451ca4ebaf108c5a09d3d7b828a163264d600bfd6ade9b714ee53695f9b768dc684a2bc50f145aadc4350265323481523bc7608ce21be3026639433b257f9dc790b383fd716efa") (async) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000540)={0x0, @in={{0x2, 0x4e23, @private=0xa010102}}, 0x2eda, 0x6}, &(0x7f0000000600)=0x90) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000640)={r5, 0x2, 0x30}, &(0x7f0000000680)=0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00'}) (async) getsockopt$IP_SET_OP_GET_FNAME(r2, 0x1, 0x53, &(0x7f0000000700)={0x8, 0x7, 0x0, 'syz0\x00'}, &(0x7f0000000740)=0x2c) (async) r7 = socket$packet(0x11, 0x3, 0x300) (async) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000780)={0x31, 0x70, 0xa, 0x5, 0x4, 0x3ff, 0x7, 0x3, r6}, &(0x7f00000007c0)=0x20) r8 = accept$packet(r7, &(0x7f0000000800)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000840)=0x14) r9 = socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r9, &(0x7f00000009c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x5c, r10, 0x200, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xfffffffb, 0x3a}}}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x10, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x18a}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}]]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000404}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r8, 0x28, 0x1, &(0x7f0000000a00)=0x9, 0x8) (async) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000a80), r9) sendmsg$ETHTOOL_MSG_COALESCE_SET(r9, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x4c, r11, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@ETHTOOL_A_COALESCE_TX_MAX_FRAMES_LOW={0x8}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_HIGH={0x8}, @ETHTOOL_A_COALESCE_RX_USECS_LOW={0x8, 0xe, 0x3}, @ETHTOOL_A_COALESCE_RX_USECS={0x8, 0x2, 0x7}, @ETHTOOL_A_COALESCE_PKT_RATE_HIGH={0x8, 0x12, 0x401}, @ETHTOOL_A_COALESCE_TX_USECS_IRQ={0x8}, @ETHTOOL_A_COALESCE_RATE_SAMPLE_INTERVAL={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x804}, 0x20004045) (async) ioctl$EXT4_IOC_GROUP_EXTEND(r3, 0x40086607, &(0x7f0000000bc0)) (async) r12 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r12, 0x400448ca, &(0x7f0000000c00)="9660874d48c7c7480048fa243b133c3eef4b28d1f8fff7583f87630b3f48ea08f0e9314c1064b5766f06a508b90697c87d3a12358b633c97b1ec4f065e480ed60d43f85377b17338688d334a62b71ee56fe38f1fd719062749001dedd7bb0bab54807b316d0d52438c0affc97f5555ec412e3b64b8f894ea8089efba0a240e06eee3c6b81cb0232325683e294bcd17105c95ab999021f38cc435364f287eeb98d7cb374657d870415ddd07469b278cb068a9633282843838c05d35c9ef723d512ab1dbf7e2863ba2778f63ae5c8d9c32bc98e77b") (async, rerun: 64) ioctl$sock_inet_SIOCGIFADDR(r4, 0x8915, &(0x7f0000000d00)={'veth0_to_bond\x00', {0x2, 0x0, @empty}}) (rerun: 64) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000001580)={0xa, 0x7, {0x1, @usage=0x8001, 0x0, 0x7, 0x8, 0x6, 0xc19c, 0x8, 0x409, @struct={0x3, 0x1}, 0x8, 0x2, [0x7ff, 0x7fffffff, 0x1b27, 0x59, 0x401]}, {0x1, @usage=0x10000, 0x0, 0x4, 0xffffffff, 0x8, 0x4, 0xff, 0x25, @struct={0x5, 0x3}, 0x1, 0x6, [0x6, 0x7fffffff, 0xffffffff, 0x63af, 0x1, 0x6]}, {0xfff, @usage=0x806, 0x0, 0x1, 0x8, 0x6, 0xffffffffffffffff, 0xfffffffffffffffc, 0x51, @usage=0x1, 0xd71f, 0x3, [0x3, 0xfffffffffffffff0, 0x4, 0xa1, 0x95b5, 0x2]}, {0x7, 0x101, 0x3}}) 16.328388334s ago: executing program 2 (id=1439): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000f9ffffff00000000e9ff80000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) (async) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@mpls_getroute={0x24, 0x1a, 0x9e8a232eead7a86d, 0x0, 0x0, {0x1c, 0x14}, [@RTA_DST={0x8, 0x1, {0x4}}]}, 0x24}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xffffff7a, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async, rerun: 64) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000440)=0x8000a, 0x4) (async, rerun: 64) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000200), 0x4) (async) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}]}]}, 0xac}}, 0x0) (async, rerun: 32) r5 = socket$inet_sctp(0x2, 0x1, 0x84) (rerun: 32) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x9c) (async) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000000), &(0x7f0000000180)=0x4) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000001c00)={0x0, @in, 0x0, 0x0, 0xffffffff}, &(0x7f0000001cc0)=0x9c) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r6}, 0xc) 16.26253498s ago: executing program 0 (id=1440): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_type(r1, &(0x7f0000000100), 0x2, 0x0) sendfile(r2, r2, 0x0, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x10, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="18080000e0000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100000000009500000000000000b7020000000000007b9af8ff00000000b509020000000000dbaaf8fff1000000bf8200000000000007080000f8ffffffbfa400000000000007090000f0ffffffc70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f1ff76000000bf9800000000000056000000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 16.096594654s ago: executing program 1 (id=1442): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$gtp(&(0x7f00000003c0), 0xffffffffffffffff) socket(0x1e, 0x805, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000001400791048000000000069002a000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0xa3}, 0x21) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f00000000c0)='syz_tun\x00', 0x10) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x4000, 0x0, 0x1, 0x0, @private=0xa010101, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x1, 0x0, @multicast2, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000000000008000700", @ANYRES32, @ANYBLOB="08000400000000000c0003000000000000000000080005000000000008000100", @ANYRES32=0x0, @ANYBLOB="0800020000000000060006"], 0x50}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000ec0)=@newtaction={0xca8, 0x30, 0xffffffffffffffff, 0x0, 0x40002, {}, [{0xc94, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x64, 0x7, 0x8, 0x1}}, @TCA_ACT_BPF_FD={0x8, 0x5, r1}]}, {0x4}, {0xc}, {0xc}}}, @m_police={0xc44, 0x2, 0x0, 0x0, {{0xb}, {0xc18, 0x2, 0x0, 0x1, [[@TCA_POLICE_AVRATE={0x8, 0x4, 0x8}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x28, 0xfffffff8, 0x3, 0x4, 0xffffffc0, 0x6, 0x5, 0x5, 0x2, 0x117, 0x10000, 0x8001, 0x2, 0x1, 0x7, 0x9, 0x80000000, 0xaa, 0x3ff, 0x4, 0x9, 0x0, 0x51, 0xf, 0x2, 0x4000001, 0x10000, 0x200, 0x7, 0x2, 0x4, 0x8, 0x101, 0x8, 0x0, 0x3, 0xe, 0x66d, 0x80000000, 0x3, 0x1, 0x8, 0x2, 0x7fff, 0xd, 0x4, 0x1ff, 0xffff, 0x7f, 0xfffffffd, 0x40, 0x7, 0x3, 0x400, 0x6, 0x8, 0x2, 0x1, 0x7, 0x9, 0x594, 0x0, 0x2900, 0x100, 0x4, 0x305c000, 0x7, 0xfffffff7, 0x7, 0x800, 0x5, 0xf24, 0x5, 0x7fffffff, 0x923, 0x101, 0x1155, 0x3, 0x1, 0x0, 0xffffffff, 0xcd2, 0xfffffffa, 0x800, 0x4, 0x81, 0x3, 0x0, 0x3, 0xf, 0x1, 0x1, 0xe, 0x3b2, 0x6, 0x4, 0x1ff, 0x6, 0x5, 0x1000, 0xe6, 0x7fff, 0x1, 0x8c, 0x1, 0x80, 0xfffffffb, 0x5, 0x7f0, 0xfffffff0, 0xffff, 0xfffffff7, 0xcfb6, 0x6, 0x4, 0x1194, 0xaf, 0xa, 0x2, 0xe0, 0x0, 0x7f, 0x6, 0x0, 0x2, 0x9a7, 0x7fffffff, 0x5, 0x83f, 0xa36e58b, 0x100, 0x9, 0x7, 0x8, 0x2, 0x1, 0xfffffffe, 0x1242, 0x579, 0x3, 0x5, 0x7, 0x0, 0x4, 0x8d, 0x3, 0x4, 0x5, 0x8, 0xc, 0x6, 0xffffffff, 0xaebe, 0x9, 0x90a, 0x7, 0x3, 0x2, 0x80000000, 0x9, 0x9, 0x5, 0xfffffff1, 0x3cd, 0xc, 0x4, 0x2, 0x9, 0x6, 0x4, 0x1, 0x7, 0x0, 0x2, 0x1, 0x5, 0x7f, 0xe6ef, 0x9, 0x6, 0x1, 0x7, 0x0, 0x7fffffff, 0x7, 0x0, 0x8, 0x9, 0x5, 0x8, 0x0, 0x6, 0x7, 0x1, 0x401, 0x8762, 0x9, 0x0, 0x4, 0x4, 0xff, 0x3, 0xd, 0x8, 0xf, 0x2, 0x6, 0x80000000, 0x3, 0x7f, 0xfffffffc, 0x2, 0x61, 0x8, 0x100, 0x5, 0xc56, 0xe, 0x0, 0x8, 0x8, 0x6, 0x9, 0x5b0, 0x6, 0xffff, 0x5f3, 0xc5f8, 0x1000, 0x2, 0x9, 0x7, 0x1, 0x1, 0x3, 0x0, 0x2, 0x200, 0x253a, 0xb, 0x9, 0x3, 0x0, 0xf, 0x1, 0x4, 0x2, 0x1000, 0x7, 0xb96, 0x3, 0xff, 0x8, 0x9, 0xb]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x1ff, 0x4835, 0x4c30, 0x8, 0x8, 0xffffff68, 0x1000000, 0x7, 0x1d, 0x8000, 0xd3d9, 0x2, 0x82fd, 0x3, 0x8000, 0x7f, 0x401, 0x800, 0x2, 0xe3a2, 0x2, 0x9, 0x1, 0x401, 0x400, 0x1855af6b, 0xff, 0xfffffffa, 0xf5, 0xffff70f3, 0x8, 0xfff, 0x6, 0x8, 0x7, 0x0, 0xf61, 0x8, 0x80000000, 0x5, 0xc0, 0x14c6, 0x4, 0x2, 0xfffff800, 0x3d3, 0x4, 0x0, 0x1, 0x163af427, 0x6, 0xfffffff8, 0xffff5f90, 0x9, 0x5, 0x6, 0xca41, 0x4, 0xffffffff, 0x7, 0x80000001, 0x7, 0x6, 0x80, 0x3, 0x9, 0x9, 0x8, 0x40, 0xe5, 0x6, 0x0, 0x4, 0xe, 0x9, 0xc7f, 0x7, 0x7363, 0x3, 0xc0000000, 0x7d2, 0x200, 0x13e, 0x5, 0x4d, 0x10000, 0x2, 0x1e7, 0x8, 0x7fff, 0xfffffff8, 0xc, 0x6, 0x3, 0xfffffff9, 0xb, 0x8001, 0x7, 0xfffffffe, 0x7, 0x0, 0x954, 0x8, 0x3ff, 0x8, 0x0, 0xab2e, 0xaf, 0x7, 0x2, 0x4, 0x3, 0x3, 0x6, 0xe6, 0x8, 0x0, 0xfffffff8, 0x1, 0x2, 0xffffff52, 0x3, 0xf, 0x1000004, 0x2, 0x4, 0x6, 0x4, 0x3, 0x7, 0x7, 0xffffffff, 0x1, 0x9, 0x6, 0x4, 0x178, 0xbbfc, 0x8000, 0xc, 0x0, 0x7, 0x5, 0x9, 0xfff, 0x2, 0x4, 0x0, 0x2, 0x8, 0x0, 0x10, 0x8, 0x2, 0x62, 0x3, 0x6, 0x10000, 0x7, 0xe9, 0x6, 0x7f, 0x6, 0xfffffff8, 0x0, 0x0, 0x81, 0x2, 0x0, 0xd, 0x7f, 0x200000, 0x3, 0x2, 0x8839, 0x200, 0x80, 0xffff0000, 0x1ff, 0x6fc3eb4a, 0x8f, 0x2, 0x4, 0x6, 0x9, 0x7, 0x0, 0x1000, 0x7, 0x3, 0x8000, 0xb96, 0x200, 0x1, 0x80, 0xfff, 0xff, 0x400, 0xe7d, 0xd, 0x80000000, 0x9, 0xe122, 0x9, 0xffffff80, 0x2, 0x3, 0x3fffc000, 0x1ff, 0x6, 0x7, 0x0, 0x7, 0x7, 0x7, 0x6, 0x9000, 0xffffffff, 0x9, 0x800, 0x6, 0x1000, 0x0, 0xe, 0xcca, 0x7, 0x80, 0x0, 0x8, 0xef000000, 0x0, 0x3, 0x4, 0xba, 0x7ff, 0x1, 0x8, 0x5320, 0x7, 0xdd, 0x1, 0xfb, 0x1ff, 0x6, 0xc90, 0x40, 0xffffffff, 0x2, 0x7, 0xd, 0x1, 0x0, 0x101, 0x73be, 0x5]}, @TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x8, 0x3, 0x9, 0x9169, 0x400, 0x5, 0x9, 0x6d65, 0x4, 0x25e, 0x0, 0x7b06, 0x5, 0x2, 0x80000001, 0x4, 0x0, 0x9, 0x42bbc4c2, 0x1ff, 0x3d3f882c, 0x81, 0x7, 0xd2, 0x0, 0x2, 0x5de, 0xa, 0x1, 0x3, 0xa, 0x7, 0x1ef, 0x1, 0x7, 0x2, 0xffffffff, 0x2, 0x8, 0xd9, 0x7ff, 0x8, 0x7, 0x8, 0x1, 0x8, 0x2368, 0x1, 0x9, 0xfff, 0x5, 0x5, 0x9, 0x2, 0x7f, 0xcb, 0x1, 0x5, 0x10001, 0x7909, 0x2, 0x10000, 0x87, 0x0, 0x6, 0x0, 0x4, 0x9, 0x2, 0x9, 0x7f, 0x0, 0x0, 0x8, 0x8, 0x7, 0x0, 0x4, 0x20000000, 0x198d4fdc, 0x9, 0xfc, 0x6, 0x58, 0x3, 0x7ff, 0x3, 0x3ff, 0x1, 0xd9b0, 0x80, 0xfffffffc, 0x7, 0x74, 0x5, 0xe96, 0x100, 0x4, 0x9, 0x0, 0x3, 0x9, 0x8, 0x9, 0xd, 0x8, 0x3, 0x1, 0x2, 0x4, 0x7, 0xd, 0x0, 0x7, 0x80, 0xb, 0x2, 0x1, 0xfc, 0x4, 0x2, 0x6, 0x6, 0x0, 0x3, 0x0, 0x8, 0x1, 0x101, 0x0, 0xf0, 0xfffffffe, 0x1ff, 0x7, 0xc00, 0x5, 0x6, 0x100, 0x0, 0x2, 0x6, 0x8001, 0x8, 0x8, 0x6, 0x5, 0x10001, 0x4, 0xfffffffa, 0xc, 0x3, 0x200, 0x212, 0x3, 0xff, 0xffffff54, 0x3, 0x2, 0x3, 0xd, 0x8, 0x3d8f, 0x3, 0x8001, 0x3, 0x7, 0x5, 0xd16c, 0x2, 0x1, 0x3, 0x7, 0x9, 0x0, 0x2, 0x8, 0x6, 0x7, 0x5, 0x4, 0x22, 0x0, 0xfffffff0, 0xfffffffc, 0x5, 0x2, 0x6, 0x800, 0x9, 0x80, 0x101, 0x6, 0x0, 0x0, 0x4, 0x98, 0x7, 0x2, 0x3c, 0x6, 0x8, 0x1ff, 0x5c4, 0x5, 0xffff, 0x0, 0x2, 0x0, 0x4, 0x5, 0x6, 0x3, 0x0, 0x7, 0x2, 0x8, 0x4, 0x1000, 0x0, 0xffff, 0x800, 0xdb000000, 0x4, 0xfffffffd, 0xb, 0xb, 0x6, 0x6, 0xe, 0x0, 0x10000, 0x6, 0x480, 0x8, 0x7, 0x3, 0x6, 0x9, 0x5, 0xfffffff0, 0xa613, 0x7, 0x87, 0x7f, 0x7, 0x0, 0x8, 0x0, 0x9, 0x6, 0x2, 0x3, 0x9, 0x5, 0x8]}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0xca8}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$gtp(&(0x7f00000003c0), 0xffffffffffffffff) (async) socket(0x1e, 0x805, 0x0) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000001400791048000000000069002a000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0xa3}, 0x21) (async) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f00000000c0)='syz_tun\x00', 0x10) (async) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x4000, 0x0, 0x1, 0x0, @private=0xa010101, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x1, 0x0, @multicast2, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) (async) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000000000008000700", @ANYRES32, @ANYBLOB="08000400000000000c0003000000000000000000080005000000000008000100", @ANYRES32=0x0, @ANYBLOB="0800020000000000060006"], 0x50}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000ec0)=@newtaction={0xca8, 0x30, 0xffffffffffffffff, 0x0, 0x40002, {}, [{0xc94, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x64, 0x7, 0x8, 0x1}}, @TCA_ACT_BPF_FD={0x8, 0x5, r1}]}, {0x4}, {0xc}, {0xc}}}, @m_police={0xc44, 0x2, 0x0, 0x0, {{0xb}, {0xc18, 0x2, 0x0, 0x1, [[@TCA_POLICE_AVRATE={0x8, 0x4, 0x8}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x28, 0xfffffff8, 0x3, 0x4, 0xffffffc0, 0x6, 0x5, 0x5, 0x2, 0x117, 0x10000, 0x8001, 0x2, 0x1, 0x7, 0x9, 0x80000000, 0xaa, 0x3ff, 0x4, 0x9, 0x0, 0x51, 0xf, 0x2, 0x4000001, 0x10000, 0x200, 0x7, 0x2, 0x4, 0x8, 0x101, 0x8, 0x0, 0x3, 0xe, 0x66d, 0x80000000, 0x3, 0x1, 0x8, 0x2, 0x7fff, 0xd, 0x4, 0x1ff, 0xffff, 0x7f, 0xfffffffd, 0x40, 0x7, 0x3, 0x400, 0x6, 0x8, 0x2, 0x1, 0x7, 0x9, 0x594, 0x0, 0x2900, 0x100, 0x4, 0x305c000, 0x7, 0xfffffff7, 0x7, 0x800, 0x5, 0xf24, 0x5, 0x7fffffff, 0x923, 0x101, 0x1155, 0x3, 0x1, 0x0, 0xffffffff, 0xcd2, 0xfffffffa, 0x800, 0x4, 0x81, 0x3, 0x0, 0x3, 0xf, 0x1, 0x1, 0xe, 0x3b2, 0x6, 0x4, 0x1ff, 0x6, 0x5, 0x1000, 0xe6, 0x7fff, 0x1, 0x8c, 0x1, 0x80, 0xfffffffb, 0x5, 0x7f0, 0xfffffff0, 0xffff, 0xfffffff7, 0xcfb6, 0x6, 0x4, 0x1194, 0xaf, 0xa, 0x2, 0xe0, 0x0, 0x7f, 0x6, 0x0, 0x2, 0x9a7, 0x7fffffff, 0x5, 0x83f, 0xa36e58b, 0x100, 0x9, 0x7, 0x8, 0x2, 0x1, 0xfffffffe, 0x1242, 0x579, 0x3, 0x5, 0x7, 0x0, 0x4, 0x8d, 0x3, 0x4, 0x5, 0x8, 0xc, 0x6, 0xffffffff, 0xaebe, 0x9, 0x90a, 0x7, 0x3, 0x2, 0x80000000, 0x9, 0x9, 0x5, 0xfffffff1, 0x3cd, 0xc, 0x4, 0x2, 0x9, 0x6, 0x4, 0x1, 0x7, 0x0, 0x2, 0x1, 0x5, 0x7f, 0xe6ef, 0x9, 0x6, 0x1, 0x7, 0x0, 0x7fffffff, 0x7, 0x0, 0x8, 0x9, 0x5, 0x8, 0x0, 0x6, 0x7, 0x1, 0x401, 0x8762, 0x9, 0x0, 0x4, 0x4, 0xff, 0x3, 0xd, 0x8, 0xf, 0x2, 0x6, 0x80000000, 0x3, 0x7f, 0xfffffffc, 0x2, 0x61, 0x8, 0x100, 0x5, 0xc56, 0xe, 0x0, 0x8, 0x8, 0x6, 0x9, 0x5b0, 0x6, 0xffff, 0x5f3, 0xc5f8, 0x1000, 0x2, 0x9, 0x7, 0x1, 0x1, 0x3, 0x0, 0x2, 0x200, 0x253a, 0xb, 0x9, 0x3, 0x0, 0xf, 0x1, 0x4, 0x2, 0x1000, 0x7, 0xb96, 0x3, 0xff, 0x8, 0x9, 0xb]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x1ff, 0x4835, 0x4c30, 0x8, 0x8, 0xffffff68, 0x1000000, 0x7, 0x1d, 0x8000, 0xd3d9, 0x2, 0x82fd, 0x3, 0x8000, 0x7f, 0x401, 0x800, 0x2, 0xe3a2, 0x2, 0x9, 0x1, 0x401, 0x400, 0x1855af6b, 0xff, 0xfffffffa, 0xf5, 0xffff70f3, 0x8, 0xfff, 0x6, 0x8, 0x7, 0x0, 0xf61, 0x8, 0x80000000, 0x5, 0xc0, 0x14c6, 0x4, 0x2, 0xfffff800, 0x3d3, 0x4, 0x0, 0x1, 0x163af427, 0x6, 0xfffffff8, 0xffff5f90, 0x9, 0x5, 0x6, 0xca41, 0x4, 0xffffffff, 0x7, 0x80000001, 0x7, 0x6, 0x80, 0x3, 0x9, 0x9, 0x8, 0x40, 0xe5, 0x6, 0x0, 0x4, 0xe, 0x9, 0xc7f, 0x7, 0x7363, 0x3, 0xc0000000, 0x7d2, 0x200, 0x13e, 0x5, 0x4d, 0x10000, 0x2, 0x1e7, 0x8, 0x7fff, 0xfffffff8, 0xc, 0x6, 0x3, 0xfffffff9, 0xb, 0x8001, 0x7, 0xfffffffe, 0x7, 0x0, 0x954, 0x8, 0x3ff, 0x8, 0x0, 0xab2e, 0xaf, 0x7, 0x2, 0x4, 0x3, 0x3, 0x6, 0xe6, 0x8, 0x0, 0xfffffff8, 0x1, 0x2, 0xffffff52, 0x3, 0xf, 0x1000004, 0x2, 0x4, 0x6, 0x4, 0x3, 0x7, 0x7, 0xffffffff, 0x1, 0x9, 0x6, 0x4, 0x178, 0xbbfc, 0x8000, 0xc, 0x0, 0x7, 0x5, 0x9, 0xfff, 0x2, 0x4, 0x0, 0x2, 0x8, 0x0, 0x10, 0x8, 0x2, 0x62, 0x3, 0x6, 0x10000, 0x7, 0xe9, 0x6, 0x7f, 0x6, 0xfffffff8, 0x0, 0x0, 0x81, 0x2, 0x0, 0xd, 0x7f, 0x200000, 0x3, 0x2, 0x8839, 0x200, 0x80, 0xffff0000, 0x1ff, 0x6fc3eb4a, 0x8f, 0x2, 0x4, 0x6, 0x9, 0x7, 0x0, 0x1000, 0x7, 0x3, 0x8000, 0xb96, 0x200, 0x1, 0x80, 0xfff, 0xff, 0x400, 0xe7d, 0xd, 0x80000000, 0x9, 0xe122, 0x9, 0xffffff80, 0x2, 0x3, 0x3fffc000, 0x1ff, 0x6, 0x7, 0x0, 0x7, 0x7, 0x7, 0x6, 0x9000, 0xffffffff, 0x9, 0x800, 0x6, 0x1000, 0x0, 0xe, 0xcca, 0x7, 0x80, 0x0, 0x8, 0xef000000, 0x0, 0x3, 0x4, 0xba, 0x7ff, 0x1, 0x8, 0x5320, 0x7, 0xdd, 0x1, 0xfb, 0x1ff, 0x6, 0xc90, 0x40, 0xffffffff, 0x2, 0x7, 0xd, 0x1, 0x0, 0x101, 0x73be, 0x5]}, @TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x8, 0x3, 0x9, 0x9169, 0x400, 0x5, 0x9, 0x6d65, 0x4, 0x25e, 0x0, 0x7b06, 0x5, 0x2, 0x80000001, 0x4, 0x0, 0x9, 0x42bbc4c2, 0x1ff, 0x3d3f882c, 0x81, 0x7, 0xd2, 0x0, 0x2, 0x5de, 0xa, 0x1, 0x3, 0xa, 0x7, 0x1ef, 0x1, 0x7, 0x2, 0xffffffff, 0x2, 0x8, 0xd9, 0x7ff, 0x8, 0x7, 0x8, 0x1, 0x8, 0x2368, 0x1, 0x9, 0xfff, 0x5, 0x5, 0x9, 0x2, 0x7f, 0xcb, 0x1, 0x5, 0x10001, 0x7909, 0x2, 0x10000, 0x87, 0x0, 0x6, 0x0, 0x4, 0x9, 0x2, 0x9, 0x7f, 0x0, 0x0, 0x8, 0x8, 0x7, 0x0, 0x4, 0x20000000, 0x198d4fdc, 0x9, 0xfc, 0x6, 0x58, 0x3, 0x7ff, 0x3, 0x3ff, 0x1, 0xd9b0, 0x80, 0xfffffffc, 0x7, 0x74, 0x5, 0xe96, 0x100, 0x4, 0x9, 0x0, 0x3, 0x9, 0x8, 0x9, 0xd, 0x8, 0x3, 0x1, 0x2, 0x4, 0x7, 0xd, 0x0, 0x7, 0x80, 0xb, 0x2, 0x1, 0xfc, 0x4, 0x2, 0x6, 0x6, 0x0, 0x3, 0x0, 0x8, 0x1, 0x101, 0x0, 0xf0, 0xfffffffe, 0x1ff, 0x7, 0xc00, 0x5, 0x6, 0x100, 0x0, 0x2, 0x6, 0x8001, 0x8, 0x8, 0x6, 0x5, 0x10001, 0x4, 0xfffffffa, 0xc, 0x3, 0x200, 0x212, 0x3, 0xff, 0xffffff54, 0x3, 0x2, 0x3, 0xd, 0x8, 0x3d8f, 0x3, 0x8001, 0x3, 0x7, 0x5, 0xd16c, 0x2, 0x1, 0x3, 0x7, 0x9, 0x0, 0x2, 0x8, 0x6, 0x7, 0x5, 0x4, 0x22, 0x0, 0xfffffff0, 0xfffffffc, 0x5, 0x2, 0x6, 0x800, 0x9, 0x80, 0x101, 0x6, 0x0, 0x0, 0x4, 0x98, 0x7, 0x2, 0x3c, 0x6, 0x8, 0x1ff, 0x5c4, 0x5, 0xffff, 0x0, 0x2, 0x0, 0x4, 0x5, 0x6, 0x3, 0x0, 0x7, 0x2, 0x8, 0x4, 0x1000, 0x0, 0xffff, 0x800, 0xdb000000, 0x4, 0xfffffffd, 0xb, 0xb, 0x6, 0x6, 0xe, 0x0, 0x10000, 0x6, 0x480, 0x8, 0x7, 0x3, 0x6, 0x9, 0x5, 0xfffffff0, 0xa613, 0x7, 0x87, 0x7f, 0x7, 0x0, 0x8, 0x0, 0x9, 0x6, 0x2, 0x3, 0x9, 0x5, 0x8]}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0xca8}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async) 16.095888608s ago: executing program 2 (id=1443): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010829bd7000000000000b00000008000300", @ANYRES32, @ANYBLOB="60005080110001004abee339084eeef16f162471f4000000080003000cac0f000500020007"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r2, 0x0, 0x48f, &(0x7f0000000280)={0x3a, @empty, 0x4e20, 0x0, 'sed\x00', 0x0, 0x0, 0x11}, 0x2c) r3 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x48, r3, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_FLOW={0x6}, @GTPA_FAMILY={0x5, 0xd, 0x8}, @GTPA_FAMILY={0x5}, @GTPA_PEER_ADDR6={0x14, 0xb, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x48}, 0x1, 0x0, 0x0, 0x1eebfef3e2a8c783}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xb0}, [@ldst={0x6}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@fallback=r2, 0x8, 0x1, 0x7, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r6 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) syz_genetlink_get_family_id$mptcp(0x0, r6) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r8, @ANYBLOB="00000000000000005c001280110001006272696467655f736c6176650000000044000580050005000000000005"], 0x7c}}, 0x0) r9 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000400)=0xffffffffffffffff, 0x4) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000380)={@ifindex=r8, r4, 0x12, 0x2008, 0x0, @value=r9, @void, @void, @void, r5}, 0x20) 16.052447587s ago: executing program 3 (id=1444): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_pressure(r2, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r3, &(0x7f0000000080)={'some', 0x20, 0x2000000008, 0x20, 0x10000000fffff}, 0x2f) close(0x4) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000007c0)={0x150, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xe}, {0x6, 0x16, 0x9}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x8000}, {0x8, 0xb, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x80000000}, {0x6, 0x16, 0x6}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x9}, {0x8, 0xb, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x1}, {0x6, 0x16, 0x8}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x5}, {0x8, 0xb, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xff}, {0x6, 0x16, 0x9}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x2}, {0x8, 0xb, 0xffffff01}}]}, 0x150}, 0x1, 0x0, 0x0, 0x20000000}, 0x4084) recvmmsg(r1, &(0x7f0000002180)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000500)=""/254, 0xfe}, {&(0x7f00000000c0)=""/50, 0x32}], 0x2}, 0x3f}], 0x1, 0x60, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 15.989805536s ago: executing program 0 (id=1445): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4b0, 0x158, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3e0, 0xffffffff, 0xffffffff, 0x3e0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0x0, 0x0, 0xff], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x138, 0x158, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0x2}, {0x7f}], 0x2, 0x2}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [0x0, 0xffffffff], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x5, 0x41, 0x0, 0x2, 0x1800, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x510) (async) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) (async) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3], [0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}}]}, 0x8c}}, 0x0) syz_emit_ethernet(0x162, &(0x7f0000000b00)=ANY=[@ANYBLOB="e33110495bfdaaaaaaaaaa0086dd60cb653e012c3afffe800000000000000000000000000000fe8000000000000000000000000000aa800090787fff0000f7c9b23f07fd585008"], 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) (async) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000000)='cgroup\x00', 0x101, 0x0, 0xf, 0x0, 0x0}) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f00000000c0)='cpu.max\x00', 0x2, 0x0) write$cgroup_int(r6, &(0x7f0000000140)=0xffffffffffffffff, 0x12) (async) bind(r4, &(0x7f0000000300)=@generic={0x1d, "89d079df2815ae43ccda410d348bbaf2c702c43620d58cdcb15013f741d03baaac7b8af347ca8ca97c8c3809f4ce980c1cc8c67d21e7f9df75174022adfe4be24c8bdd3404567381bdb993980ee0e2e9c718953d01b39522000cc983dffd0c0b4dd1d9a48151cb47dfb833b15605350d8a722fa9893e21643cd43ffd3fd8"}, 0x80) r7 = socket$inet_udp(0x2, 0x2, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x3, &(0x7f0000000b80)=ANY=[@ANYBLOB="180085ff000000000000dfffffffffa895000000e9ffffff30bb4e747a6bd0a62e672b9646d76c70251e27d40e00000000000000089d5209701c578184ae8635035b308bb3f03bb143bfa8f63be9fa79cf74fc9d6a595d569897de"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x70, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) setsockopt$inet_MCAST_JOIN_GROUP(r7, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) (async) setsockopt$inet_group_source_req(r7, 0x0, 0x2f, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x108) (async) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="18000000200015"], 0x18}}, 0x0) (async) setsockopt$inet_group_source_req(r7, 0x0, 0x2b, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @multicast2}}}, 0x108) (async) ioctl$XFS_IOC_COMMIT_RANGE(r4, 0x40585883, &(0x7f0000000240)={r8, 0x0, 0x2, 0x40, 0x200, 0x2, [0x100000001, 0x2, 0x2, 0x9, 0xbbcc, 0xfffffffffffffff8]}) (async) r10 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r10, 0x84, 0x6b, &(0x7f00000002c0)=[@in={0x2, 0x800, @rand_addr=0x64010102}], 0x10) syz_emit_ethernet(0x26, &(0x7f0000000040)={@local, @link_local, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x89, 0x0, @dev, @local}, "5613e798"}}}}, 0x0) r11 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000980)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x42f3, '\x00', r2, 0xffffffffffffffff, 0x3, 0x4, 0x3}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r11}, &(0x7f0000000a00), &(0x7f0000000a40)=r8}, 0x20) shutdown(r10, 0x1) (async) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r10, 0x84, 0x66, &(0x7f0000000000)={0x0, 0x5}, &(0x7f0000000040)=0x8) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r9, 0x84, 0x64, &(0x7f0000000380)=[@in6={0xa, 0x4e24, 0x1ff, @mcast1, 0x90000}, @in6={0xa, 0x4e21, 0x3, @private2, 0xffff}], 0x38) (async) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) 15.941468426s ago: executing program 1 (id=1446): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="4dff000013001118680907070000000f0000ff3f04000000170a001700000000040014001000030001302564aa58b9a64411f6bbf44dc48f57", 0x39}], 0x1) 15.878662608s ago: executing program 3 (id=1447): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000000b80)=ANY=[@ANYBLOB="021800001c000000000000000000000005000500000000000a00000000000000fe8000000000000000000000000000aa00000000000000000800120000001500000000000000000006000000000000000000000000000000e0000002000000000000000000000000fc01000000000000000000000000000005000600000000000a00000000000000000000000000000000000000000000000000000000000000080019"], 0xe0}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="3800000040000100fcff0700040000000100000004004880180001801400108004000b8008000100ac1414bb04004e00080002"], 0x38}, 0x1, 0x0, 0x0, 0x4008801}, 0x4008094) 15.872641181s ago: executing program 2 (id=1448): r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)={0x2c, r2, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x811}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="500000001000010427da205ac342380c7c89f3a1", @ANYRES32=0x0, @ANYBLOB="014800001953010014003500626f6e643000000000000000000000001c00128009000100626f6e64000000000c00028005001100"], 0x50}, 0x1, 0x0, 0x0, 0x44840}, 0x0) 15.762038744s ago: executing program 0 (id=1449): r0 = socket$tipc(0x1e, 0x4, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000001a0001000000000000000000020000000000000000000000080002"], 0x24}}, 0x0) sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)=ANY=[@ANYBLOB=';\b\b`', @ANYRES16, @ANYBLOB="010000000000000000002c000000080003000200"], 0x44}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000004000ffff0900010073797a30000000000900020073797a3100000000140003"], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd0002800800"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000640)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmmsg$unix(r5, &(0x7f0000003900)=[{{0x0, 0x0, &(0x7f0000003bc0)=[{&(0x7f0000000700)=""/218, 0xda}], 0x1}}], 0x1, 0x41, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="28000000400007012bbd700000000000047c00000400c2800c00018006000600843b000004000280c4f17097b5ecc0144bceb7c09cf058776e10e044b8037125cbbf2717002b20a1af05e46afc1801c28c7fe68545de938528292019e3bb4ee7ffca1934b6f2ec21ae6f00d9e41e52a4017b2dc18a8356e25cbff070fa73ab57bf26ed8b06c54fefea885b4eb890e080f0dd54b08ba09212ef78d609b2edf80265b4ef3570d5785cf1ed3e636283ad14fd7aba1c1046117305f7211219c94b39fc3f2e60ef8a705d6c6ec1b9e17c559e785f58579bcbb65c90397064f88084d6494fe8c813fe05fa"], 0x28}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) connect$tipc(r0, &(0x7f00000052c0)=@nameseq={0x1e, 0x4}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, &(0x7f0000003080)=ANY=[@ANYBLOB="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"/3584], &(0x7f0000014ff5)='GPL\x00', 0x2, 0x103a, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2a3}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r6, 0x3a, 0xcc0, 0xcc0, &(0x7f0000000200)="e460cdfbef2408322900119386dd6a00000000072feb311ccd3ec8a755c1e1380081ffad008036e8d50000ff010000001400000500242f09880bd320d98a61a90057e9bf", 0x0, 0x401, 0x0, 0xa8, 0x0, &(0x7f00000011c0)="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", &(0x7f00000004c0)="b33620dad49cc786c86a5c5444e76c2a1ef9224fb91083d2ba4368e98a14467703e9ee585196fa95320bd53c6a76ad443b81dc833b22016aeaafb4597c06919ecf7e5ea4d0a8995feaaf9a9feb0c4b5277398049a2f5475f6ceb26bd128189f4b1b3c662d3d1630717791de0cdac3ce6e01c5719b670da5ded7dfa9dda53f04ad151cb952d708eaa69e983dcfab36b2dac3f3fe85e1d86b3d73d4879fb11cfac51f3cb669a50", 0x1, 0xfffffffd}, 0x22) 15.75864547s ago: executing program 1 (id=1450): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0xc0}}, 0x14) 15.699016777s ago: executing program 3 (id=1451): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f0000000240)={0x1d8, 0x1, 0x3, 0x201, 0x0, 0x0, {0xc, 0x0, 0x3}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x2}, @NFQA_EXP={0x34, 0xf, 0x0, 0x1, [@CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x8000}, @CTA_EXPECT_FLAGS={0x8}, @CTA_EXPECT_HELP_NAME={0xe, 0x6, 'snmp_trap\x00'}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x3}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x8}]}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x3}}, @NFQA_VLAN={0xc, 0x13, 0x0, 0x1, [@NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x668}]}, @NFQA_CT={0x3c, 0xb, 0x0, 0x1, [@CTA_LABELS={0xc, 0x16, 0x1, 0x0, [0x2, 0x1ef1]}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x3}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x5}, @CTA_TUPLE_ORIG={0x1c, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}]}, @NFQA_CT={0x4c, 0xb, 0x0, 0x1, [@CTA_LABELS={0x8, 0x16, 0x1, 0x0, [0x9]}, @CTA_TUPLE_ORIG={0x40, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010100}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x38}}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}]}, @NFQA_PAYLOAD={0xa4, 0xa, "a843523bafb9e61bfa47c2ade436984e1078242154870347b35b73ed1f8f4c6cabc3e02a4367346d36aac21e411fbdb2f74eaa7daaaaa7c1a3d22dd00fc2732b02be4113e4eab4b46596d8484de2e954164c731a6d6afb61a3cfd83a5f27ae231aaaa75517812ee2dd846ee517195768a478bbaa799ca1512375b9e63246434a8f5e3b89fe62107d010791528f9d6bdda4cd212b1e1f0d1cbebce5d84293c044"}, @NFQA_VLAN={0x44, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x3}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x86c9}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0xf000}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x983}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x9}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}]}]}, 0x1d8}, 0x1, 0x0, 0x0, 0x20000851}, 0x8841) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001", @ANYRES16=r0, @ANYRES16=r0], 0x7c}}, 0x80) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000210000000000000000000000000a6c000000160a3f360000000000000000020000000900010073797a30000000004000038008000240000000002c0003801400010076657468305f746f5f626f6e64000000140001007665746830000000000000000000000008000140000000000900020073797a300000000014000000110001"], 0x94}}, 0x8000) 15.239863608s ago: executing program 4 (id=1452): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) ioctl$FS_IOC_GETFLAGS(r1, 0x80086601, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@ipv6_getanyicast={0x14, 0x3e, 0x4, 0x70bd2c, 0x4, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4c000) r2 = socket$igmp(0x2, 0x3, 0x2) getsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000080), &(0x7f00000000c0)=0x1) syz_emit_ethernet(0x5e, &(0x7f0000002e40)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_na={0x89, 0x0, 0x0, 0x0, '\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [{0x0, 0x2, "122b472e41e24b11f34b608816e5"}]}}}}}}, 0x0) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbff, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x24004804) 15.239093645s ago: executing program 2 (id=1453): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x400, 0x3, 0x4, 0xe, 0x3, 0xd5fe, 0x0, 0x400]}}]}]}]}, 0x38}}, 0x40) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x13, 0x0, 0x0, 0x0}, 0x94) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, 0x0) sendmsg$NL802154_CMD_DEL_SEC_KEY(r4, 0x0, 0xc040) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_DEVKEY={0x10, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}]}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000044}, 0x0) r5 = syz_genetlink_get_family_id$nbd(&(0x7f00000032c0), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000003400)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010026bd7000fbdbde250300000008000100000000000c0003000000000000000000e098034118ed939dc8e581fd7f0c3e4f5f7980ed2398219abf05ab89a0aa592e11f5c73ac313e7204b7558b5c59777409ab603ba472714e97ad7fe8f614682236ef2e508aa9f5d0f04e3a839e065cba6644b7c64597e5b4f9b8d413a84d05f62a8e6e07d7907e243c783f3f99024cc3bbea415e95c79ab3ec913723209de499107138c737b4ab42201daf44b2d48a63c90c3de02000000000000007d7dc7002f178aa15bcdb9cbf41886ec447b3dbf4b"], 0x28}}, 0x8010) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x13, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x39}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x76}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) (async) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x400, 0x3, 0x4, 0xe, 0x3, 0xd5fe, 0x0, 0x400]}}]}]}]}, 0x38}}, 0x40) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x13, 0x0, 0x0, 0x0}, 0x94) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, 0x0) (async) sendmsg$NL802154_CMD_DEL_SEC_KEY(r4, 0x0, 0xc040) (async) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_DEVKEY={0x10, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}]}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000044}, 0x0) (async) syz_genetlink_get_family_id$nbd(&(0x7f00000032c0), 0xffffffffffffffff) (async) sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000003400)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010026bd7000fbdbde250300000008000100000000000c0003000000000000000000e098034118ed939dc8e581fd7f0c3e4f5f7980ed2398219abf05ab89a0aa592e11f5c73ac313e7204b7558b5c59777409ab603ba472714e97ad7fe8f614682236ef2e508aa9f5d0f04e3a839e065cba6644b7c64597e5b4f9b8d413a84d05f62a8e6e07d7907e243c783f3f99024cc3bbea415e95c79ab3ec913723209de499107138c737b4ab42201daf44b2d48a63c90c3de02000000000000007d7dc7002f178aa15bcdb9cbf41886ec447b3dbf4b"], 0x28}}, 0x8010) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x13, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x39}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x76}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) (async) 15.237850679s ago: executing program 1 (id=1454): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="0900000004000000040000000700000000000000", @ANYRES32, @ANYBLOB="00000009fe0119000020ede8af09d90000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="020000000100"/28], 0x48) r1 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmmsg(r2, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}, 0xac}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000018c0)=""/4122, 0x101a}, {&(0x7f0000000080)=""/118, 0x76}, {&(0x7f0000001740)=""/72, 0x48}], 0x3}, 0x7}, {{0x0, 0x0, 0x0}, 0x800}, {{0x0, 0x0, 0x0}, 0x80000}], 0x4, 0x2042, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) write$6lowpan_enable(r1, &(0x7f0000000080)='1', 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2ccf3766}, 0x48) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000500000000000000", @ANYRES32=r0, @ANYBLOB="10000000000000000000000000000026d19300000000008f8ba1dd37aa1a603a777d7d5b0b6dfd383b4db3f7fa4057e4149732dde36bf97649ab3a1c3b88eca6f23ef2f1b361d957eadf", @ANYRES32=0x0, @ANYRES32, @ANYRESOCT=r0, @ANYRESOCT=r1, @ANYBLOB="e8cfd6c33151418ac1ea90d25e0fd76339d912dd0a4cc6c4fbcd", @ANYRES8=r1, @ANYBLOB="4cbe28df82e5a247666285", @ANYBLOB="54190485745b915cf9230756343551256af7e53ad2c1c761734f092972801f28f9f814b147", @ANYRES64=r0, @ANYRESDEC=r1, @ANYRES16=r1], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x19, 0x1e, &(0x7f00000001c0)=ANY=[@ANYBLOB="1853e620dfffffffffffffff0008010000000000", @ANYRES32=r0, @ANYBLOB="000000000000000085100000060000000822070003000000b7080000000000007b8af8ff00000000b7080000018000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000003000000850000000600000039950c000000000095000000000000000f09180001000000"], &(0x7f00000002c0)='syzkaller\x00', 0x3ab, 0x13, &(0x7f0000000300)=""/19, 0x41000, 0x40, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000380)={0x0, 0x2, 0x7, 0x72}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x3, &(0x7f00000003c0)=[r3], &(0x7f0000000400)=[{0x2, 0x1, 0xc, 0x1}, {0x3, 0x1, 0x8, 0x4}, {0x4, 0x405, 0x6, 0x8}], 0x10, 0x5}, 0x94) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$TUNSETCARRIER(r6, 0x400454e2, &(0x7f00000006c0)) pipe(&(0x7f0000000040)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a09000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c0003802800008008000340000000021c00028018000280080001"], 0xec}}, 0x0) r9 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f0000000640)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f0000000700)=ANY=[@ANYBLOB="1c000200147277647244cd9b4a28dcfdca0224988e13f7db6f813e4ab7f2664f97bf8d144251c1ce6448f517b1950aaefa5bfa8da387298fbd6c84633b8fefa9a74211a09112b43ca27413828eef238f20db48a21d7a", @ANYRES16=r9, @ANYBLOB="000029bd7000fbdbdf25010000000800020003000000"], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4041) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xe}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_DEV={0x14, 0x3, 'wlan1\x00'}]}]}], {0x14}}, 0xa4}}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a09040000000000000000020000000900010073797a30000000000900020073797a32000000002c00048028000180080001006e6174001c0002800800024000000002080003400000000a08000140000001"], 0x80}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r12 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @random="a1e0afd9525b"}) write$tun(r5, &(0x7f0000000900)=ANY=[@ANYBLOB="1c0008000100000000003d000000aa02a1cec100d16001e62b00a6698090c780fcf26abdd85ff8dd622c233ab7665a00acbf75a337d2f10f4ee7f1e839524c85eb56f6f15412f430ada5de3202cba64ac8a6e99639c6587801ad30f6ec2626f1d84c5d1acba1600c1318d3e83393450a76b809e474d700bd3a95bf8c919d9a54a51cd4e1493e9ee6fd09997fffffff4ca74b26da4f2f62febc80795917d21acfb0e50f6f4cced6b51309aa7493c395e0dc0e6750"], 0xa4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xb, 0xa, &(0x7f0000000140)=@raw=[@map_idx={0x18, 0x0, 0x5, 0x0, 0xe}, @map_fd={0x18, 0x2, 0x1, 0x0, r3}, @alu={0x7, 0x1, 0x9, 0x8, 0x4, 0x80, 0x1}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @exit], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x44, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r4}, 0x94) 15.237430658s ago: executing program 0 (id=1455): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r0 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) (async) recvmmsg(r1, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) (async) write$tun(0xffffffffffffffff, &(0x7f00000001c0)={@val={0x0, 0x11}, @val={0x0, 0x1, 0x9, 0x4, 0x0, 0xca6}, @mpls={[], @generic="e718ab5d8c7bb16a43afd467df4db9e3bdb938032c806616a4139d75381f153fdfe0222fb8e28afcd83611de9dfc2b9b583136ecce8c61d44874f81a5c06f5e4882fc8adb78696a77470cbf9b6720f10f9d648e5f7e5ab7c92ac8c83f97432ed328f6a066cb50b47ff4a4af0efcfa6dffff18d663ad128e1931d7f0ecf0860a6b6b8525ae54f26215653df48377a73cf5c52f989c29eb7766079135e60b02142dcc71248d1dc3bcc4021f006c1fac08c74927b7952c60281ee337f02e3dc9ea39f883d5c249a3596ffe9e8ab891cfed155341fbe0a4731445d8dd7538bffcb1e72d4f01aefe5b6848cee8bac277236459f874b4b8b"}}, 0x103) (async, rerun: 32) writev(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f0000000440)="2e9b3d0007e03dd65193dfb6c575963f88a8", 0x12}], 0x1) (rerun: 32) 15.237222382s ago: executing program 3 (id=1456): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(r0, &(0x7f0000000040)='blkio.bfq.io_service_bytes\x00', 0x7a05, 0x1700) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@gettaction={0x20, 0x5a, 0x1, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) 15.236568227s ago: executing program 3 (id=1457): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0x18, &(0x7f0000000140)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x3fd}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 15.236220598s ago: executing program 0 (id=1458): bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1400000004000000040000000300000004080000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000df31e026667c34ea958f87ee776add6a3a1a8aa38f6dfb8453a43ebc266685026213a63f160a7a7e02932a857d611222c8a379f2784608cf0c08a1a2d7d87a78ef35eda3b5b89cf68d54c601fa6ebb5085af66dfa76aa7775338fb65895c5ec87488e3fbfaf1369a136f", @ANYRES32=0x0, @ANYRESDEC=0x0, @ANYBLOB='\x00'/28], 0x48) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCETHTOOL(r1, 0x8954, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r2, &(0x7f00000005c0)=[{&(0x7f0000003080)=@in={0x2, 0x4e23, @rand_addr=0x64010102}, 0x10, &(0x7f00000030c0)=[{&(0x7f0000005d00)="ec", 0x1}], 0x1, 0x0, 0x0, 0x90}], 0x1, 0x1) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f00000006c0)=0x6, 0x4) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000000040), &(0x7f0000000140)=0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={0x38, 0x2, 0x1, 0x301, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@CTA_TUPLE_ORIG={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000003, 0x44010, r4, 0x1c614000) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYRESHEX=r0, @ANYRESHEX=r0, @ANYRESHEX=r0, @ANYRES8=r0, @ANYBLOB="8fb4d324434ae6c624a1735dd56304ca3474e2b6b777ce81d7c684f7524c108247ac27775e7c0f40cb34c302892a0537fa5c47ab247e3a329fdc94cb4665ed8feabccb23383e49"], 0xdc}, 0x1, 0x0, 0x0, 0x3d06b7f2c7c6a973}, 0x0) r5 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) ioctl$EXT4_IOC_SETFSUUID(r5, 0x4008662c, &(0x7f0000000080)={0x0, 0x0, "324696e6b1cb6d6ee265456afc2b03cb"}) 15.23576383s ago: executing program 3 (id=1459): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000ac0)={0x10, 0x0, 0x25dfdbfb, 0x8000}, 0xc) sendmsg$nl_xfrm(r0, &(0x7f0000000a80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000880)=ANY=[@ANYBLOB="500000002100000829bd7000fcdbdf25e0000001000000000000000000000000ff0200000000000000000000000000014e2200084e2000dc0200a0800c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="b49103f81ba466ee"], 0x50}, 0x1, 0x0, 0x0, 0x4040}, 0x4000040) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'none\x00', 0x0, 0x4001000, 0x4a}, 0x2c) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet(r2, 0x0, 0x20000004) sendmsg$BATADV_CMD_SET_HARDIF(r3, 0x0, 0x10) socket(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000ff000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) socket(0x400000000010, 0x3, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r5, @ANYBLOB="060015000700fdff0c00168008000100", @ANYRES32=r4], 0x38}}, 0x10) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f00000010c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001080)={&(0x7f0000000f80)={0xd4, 0x1, 0x1, 0x401, 0x0, 0x0, {0x7, 0x0, 0x1}, [@CTA_TUPLE_ORIG={0x9c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010101}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x1b}}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x8779f2cddf09cdcb}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x3}, @CTA_ID={0x8}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x1}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_TUPLE_MASTER={0x4}]}, 0xd4}, 0x1, 0x0, 0x0, 0x20000044}, 0x4004000) r6 = epoll_create1(0x0) epoll_pwait(r6, 0xfffffffffffffffc, 0x0, 0x8000003, 0x0, 0x0) 202.259557ms ago: executing program 32 (id=1458): bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1400000004000000040000000300000004080000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000df31e026667c34ea958f87ee776add6a3a1a8aa38f6dfb8453a43ebc266685026213a63f160a7a7e02932a857d611222c8a379f2784608cf0c08a1a2d7d87a78ef35eda3b5b89cf68d54c601fa6ebb5085af66dfa76aa7775338fb65895c5ec87488e3fbfaf1369a136f", @ANYRES32=0x0, @ANYRESDEC=0x0, @ANYBLOB='\x00'/28], 0x48) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCETHTOOL(r1, 0x8954, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r2, &(0x7f00000005c0)=[{&(0x7f0000003080)=@in={0x2, 0x4e23, @rand_addr=0x64010102}, 0x10, &(0x7f00000030c0)=[{&(0x7f0000005d00)="ec", 0x1}], 0x1, 0x0, 0x0, 0x90}], 0x1, 0x1) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f00000006c0)=0x6, 0x4) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000000040), &(0x7f0000000140)=0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={0x38, 0x2, 0x1, 0x301, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@CTA_TUPLE_ORIG={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000003, 0x44010, r4, 0x1c614000) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYRESHEX=r0, @ANYRESHEX=r0, @ANYRESHEX=r0, @ANYRES8=r0, @ANYBLOB="8fb4d324434ae6c624a1735dd56304ca3474e2b6b777ce81d7c684f7524c108247ac27775e7c0f40cb34c302892a0537fa5c47ab247e3a329fdc94cb4665ed8feabccb23383e49"], 0xdc}, 0x1, 0x0, 0x0, 0x3d06b7f2c7c6a973}, 0x0) r5 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) ioctl$EXT4_IOC_SETFSUUID(r5, 0x4008662c, &(0x7f0000000080)={0x0, 0x0, "324696e6b1cb6d6ee265456afc2b03cb"}) 169.282719ms ago: executing program 33 (id=1454): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="0900000004000000040000000700000000000000", @ANYRES32, @ANYBLOB="00000009fe0119000020ede8af09d90000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="020000000100"/28], 0x48) r1 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmmsg(r2, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}, 0xac}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000018c0)=""/4122, 0x101a}, {&(0x7f0000000080)=""/118, 0x76}, {&(0x7f0000001740)=""/72, 0x48}], 0x3}, 0x7}, {{0x0, 0x0, 0x0}, 0x800}, {{0x0, 0x0, 0x0}, 0x80000}], 0x4, 0x2042, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) write$6lowpan_enable(r1, &(0x7f0000000080)='1', 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2ccf3766}, 0x48) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000500000000000000", @ANYRES32=r0, @ANYBLOB="10000000000000000000000000000026d19300000000008f8ba1dd37aa1a603a777d7d5b0b6dfd383b4db3f7fa4057e4149732dde36bf97649ab3a1c3b88eca6f23ef2f1b361d957eadf", @ANYRES32=0x0, @ANYRES32, @ANYRESOCT=r0, @ANYRESOCT=r1, @ANYBLOB="e8cfd6c33151418ac1ea90d25e0fd76339d912dd0a4cc6c4fbcd", @ANYRES8=r1, @ANYBLOB="4cbe28df82e5a247666285", @ANYBLOB="54190485745b915cf9230756343551256af7e53ad2c1c761734f092972801f28f9f814b147", @ANYRES64=r0, @ANYRESDEC=r1, @ANYRES16=r1], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x19, 0x1e, &(0x7f00000001c0)=ANY=[@ANYBLOB="1853e620dfffffffffffffff0008010000000000", @ANYRES32=r0, @ANYBLOB="000000000000000085100000060000000822070003000000b7080000000000007b8af8ff00000000b7080000018000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000003000000850000000600000039950c000000000095000000000000000f09180001000000"], &(0x7f00000002c0)='syzkaller\x00', 0x3ab, 0x13, &(0x7f0000000300)=""/19, 0x41000, 0x40, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000380)={0x0, 0x2, 0x7, 0x72}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x3, &(0x7f00000003c0)=[r3], &(0x7f0000000400)=[{0x2, 0x1, 0xc, 0x1}, {0x3, 0x1, 0x8, 0x4}, {0x4, 0x405, 0x6, 0x8}], 0x10, 0x5}, 0x94) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$TUNSETCARRIER(r6, 0x400454e2, &(0x7f00000006c0)) pipe(&(0x7f0000000040)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a09000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c0003802800008008000340000000021c00028018000280080001"], 0xec}}, 0x0) r9 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f0000000640)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f0000000700)=ANY=[@ANYBLOB="1c000200147277647244cd9b4a28dcfdca0224988e13f7db6f813e4ab7f2664f97bf8d144251c1ce6448f517b1950aaefa5bfa8da387298fbd6c84633b8fefa9a74211a09112b43ca27413828eef238f20db48a21d7a", @ANYRES16=r9, @ANYBLOB="000029bd7000fbdbdf25010000000800020003000000"], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4041) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xe}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_DEV={0x14, 0x3, 'wlan1\x00'}]}]}], {0x14}}, 0xa4}}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a09040000000000000000020000000900010073797a30000000000900020073797a32000000002c00048028000180080001006e6174001c0002800800024000000002080003400000000a08000140000001"], 0x80}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r12 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @random="a1e0afd9525b"}) write$tun(r5, &(0x7f0000000900)=ANY=[@ANYBLOB="1c0008000100000000003d000000aa02a1cec100d16001e62b00a6698090c780fcf26abdd85ff8dd622c233ab7665a00acbf75a337d2f10f4ee7f1e839524c85eb56f6f15412f430ada5de3202cba64ac8a6e99639c6587801ad30f6ec2626f1d84c5d1acba1600c1318d3e83393450a76b809e474d700bd3a95bf8c919d9a54a51cd4e1493e9ee6fd09997fffffff4ca74b26da4f2f62febc80795917d21acfb0e50f6f4cced6b51309aa7493c395e0dc0e6750"], 0xa4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xb, 0xa, &(0x7f0000000140)=@raw=[@map_idx={0x18, 0x0, 0x5, 0x0, 0xe}, @map_fd={0x18, 0x2, 0x1, 0x0, r3}, @alu={0x7, 0x1, 0x9, 0x8, 0x4, 0x80, 0x1}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @exit], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x44, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r4}, 0x94) 119.003619ms ago: executing program 34 (id=1453): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x400, 0x3, 0x4, 0xe, 0x3, 0xd5fe, 0x0, 0x400]}}]}]}]}, 0x38}}, 0x40) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x13, 0x0, 0x0, 0x0}, 0x94) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, 0x0) sendmsg$NL802154_CMD_DEL_SEC_KEY(r4, 0x0, 0xc040) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_DEVKEY={0x10, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}]}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000044}, 0x0) r5 = syz_genetlink_get_family_id$nbd(&(0x7f00000032c0), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000003400)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010026bd7000fbdbde250300000008000100000000000c0003000000000000000000e098034118ed939dc8e581fd7f0c3e4f5f7980ed2398219abf05ab89a0aa592e11f5c73ac313e7204b7558b5c59777409ab603ba472714e97ad7fe8f614682236ef2e508aa9f5d0f04e3a839e065cba6644b7c64597e5b4f9b8d413a84d05f62a8e6e07d7907e243c783f3f99024cc3bbea415e95c79ab3ec913723209de499107138c737b4ab42201daf44b2d48a63c90c3de02000000000000007d7dc7002f178aa15bcdb9cbf41886ec447b3dbf4b"], 0x28}}, 0x8010) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x13, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x39}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x76}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) (async) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x400, 0x3, 0x4, 0xe, 0x3, 0xd5fe, 0x0, 0x400]}}]}]}]}, 0x38}}, 0x40) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x13, 0x0, 0x0, 0x0}, 0x94) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, 0x0) (async) sendmsg$NL802154_CMD_DEL_SEC_KEY(r4, 0x0, 0xc040) (async) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_DEVKEY={0x10, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}]}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000044}, 0x0) (async) syz_genetlink_get_family_id$nbd(&(0x7f00000032c0), 0xffffffffffffffff) (async) sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000003400)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010026bd7000fbdbde250300000008000100000000000c0003000000000000000000e098034118ed939dc8e581fd7f0c3e4f5f7980ed2398219abf05ab89a0aa592e11f5c73ac313e7204b7558b5c59777409ab603ba472714e97ad7fe8f614682236ef2e508aa9f5d0f04e3a839e065cba6644b7c64597e5b4f9b8d413a84d05f62a8e6e07d7907e243c783f3f99024cc3bbea415e95c79ab3ec913723209de499107138c737b4ab42201daf44b2d48a63c90c3de02000000000000007d7dc7002f178aa15bcdb9cbf41886ec447b3dbf4b"], 0x28}}, 0x8010) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x13, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x39}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x76}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) (async) 63.911744ms ago: executing program 35 (id=1459): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000ac0)={0x10, 0x0, 0x25dfdbfb, 0x8000}, 0xc) sendmsg$nl_xfrm(r0, &(0x7f0000000a80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000880)=ANY=[@ANYBLOB="500000002100000829bd7000fcdbdf25e0000001000000000000000000000000ff0200000000000000000000000000014e2200084e2000dc0200a0800c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="b49103f81ba466ee"], 0x50}, 0x1, 0x0, 0x0, 0x4040}, 0x4000040) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000012000000bca30000000000002403000020feffff620af0fff8ffffff71a4f2ff000000001f03000000000000e5000200000000002604fdffff02000014010000033800000f130000000000007a0a00fe0000001f0f14000000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f300020000fe275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff61623604000000000000006a89adaf17b0a6041bdeebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564163427afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101a3062cd54f9ff51d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48153baae244e7bf573eac34b781337ad5905c6bbf1137548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a90144022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab540b8d7b4ead35a385e0b4a26b702396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb11883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcd857ab15e355713767c536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ced301efeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef0981000000000000ff0f40b1888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fc08001011e32f80fb60e14b9eee094277bbc170882c8890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e3f753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bb25b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963342aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b6ef9d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec035d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf79a43746979f99f6a1527f004f1e37a3926937e84fb478199dc1020f4beb98b8074bf7df8b5e783637da740800000000000000c55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a2740000000000000000000000000000000000000000000a0009dd14b38f2f4426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4100260ffcd8f1d04166d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb0000000000000005375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10baa804a707f0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d34d3757b1450fdb0a9a69f432e277f3a0386eb2bd3305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07618b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e040000003c3ffad44d2a376def42e41e9fc31678257e040fa7cf32c221aaac08000000000000001a00000000000000000000173570f0c11ae694b0f7a4f9c2f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d641ef02e4d5295d756e110522a7a945b93fb705b95b6aae27a8fb33732ce1da1c0b1af8eb9222a06e984ab1e6984c8bdc12360627137ab67b6b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481efe46a4ce86be0b1d8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0c6cb4bed8594a39bd76d3ef8a7ab014e787596db796bd93a36c2880423291e3bccc86f66ba792ff4d87b3f80e5908779e51c5e9055fc5b23605cd000c723187ef09dcf4b07b06a9342f3f62ee7acddff292082c1f4d8eb9561f80873a09a1ae0c9af1121175e5600f43a1179484502009759264a5729f07c2b218fa36ba2316a99aaad0130df83d0bda1e711290f78c143ea143967b00adcd77e6ad5e48d839ea61aadb83e4d071c54691924a3830d3e7b5c198bb0ed623153590000000000000000004b985ea1702f34f2f85b168c083e810ed567e3f1979b9ed1a4bf6a10dac825c96a0828b335de445a4880bb6474157efd1a72ca46ae4cbe3ab648c9bc4867a5a4cb87d7d6d55475b34b3cb6aa9e2337d4e04a37e35109752522ac9b186ddd80c47da6a2f4ef7bb909c975520000000000000000000000219cf5c1376ab33786f6b856d354e90a2733f78f2d188057cead3480eade49d55b770fad7fa000d23da6275768810b6b2df91d3a991ea98d929d271696c258d5b735d5db11df434e7dd1b7c1ca05cea3977df564115f4ec6ffab1d2ff8a642ca50934b3fbe44b0abeba9df209566984a29dfc0466e439a94e177b3c4d5f6e92b8176b9d6ddeeeb196fa964217f88e1acc180aaa4"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'none\x00', 0x0, 0x4001000, 0x4a}, 0x2c) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet(r2, 0x0, 0x20000004) sendmsg$BATADV_CMD_SET_HARDIF(r3, 0x0, 0x10) socket(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000ff000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) socket(0x400000000010, 0x3, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r5, @ANYBLOB="060015000700fdff0c00168008000100", @ANYRES32=r4], 0x38}}, 0x10) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f00000010c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001080)={&(0x7f0000000f80)={0xd4, 0x1, 0x1, 0x401, 0x0, 0x0, {0x7, 0x0, 0x1}, [@CTA_TUPLE_ORIG={0x9c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010101}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x1b}}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x8779f2cddf09cdcb}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x3}, @CTA_ID={0x8}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x1}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_TUPLE_MASTER={0x4}]}, 0xd4}, 0x1, 0x0, 0x0, 0x20000044}, 0x4004000) r6 = epoll_create1(0x0) epoll_pwait(r6, 0xfffffffffffffffc, 0x0, 0x8000003, 0x0, 0x0) 0s ago: executing program 36 (id=1452): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) ioctl$FS_IOC_GETFLAGS(r1, 0x80086601, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@ipv6_getanyicast={0x14, 0x3e, 0x4, 0x70bd2c, 0x4, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4c000) r2 = socket$igmp(0x2, 0x3, 0x2) getsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000080), &(0x7f00000000c0)=0x1) syz_emit_ethernet(0x5e, &(0x7f0000002e40)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_na={0x89, 0x0, 0x0, 0x0, '\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [{0x0, 0x2, "122b472e41e24b11f34b608816e5"}]}}}}}}, 0x0) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbff, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x24004804) kernel console output (not intermixed with test programs): out [ 85.672187][ T5635] Bluetooth: hci3: command tx timeout [ 85.689616][ T3288] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.710426][ T3288] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.745111][ T5635] Bluetooth: hci2: command tx timeout [ 85.745502][ T5852] netlink: 51 bytes leftover after parsing attributes in process `syz.2.9'. [ 85.792220][ T5861] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13'. [ 85.804161][ T5861] block nbd0: not configured, cannot reconfigure [ 85.847640][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.879754][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.261537][ T5874] netlink: 56 bytes leftover after parsing attributes in process `syz.0.16'. [ 86.472699][ T5890] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 86.521405][ T5895] netlink: 32 bytes leftover after parsing attributes in process `syz.0.22'. [ 86.644031][ T24] cfg80211: failed to load regulatory.db [ 86.814223][ T5910] netlink: 28 bytes leftover after parsing attributes in process `syz.1.25'. [ 86.851041][ T5916] netlink: 4 bytes leftover after parsing attributes in process `syz.2.27'. [ 86.891394][ T5916] netlink: 24 bytes leftover after parsing attributes in process `syz.2.27'. [ 86.935595][ T5916] warning: `syz.2.27' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 86.986451][ T5916] netlink: 4 bytes leftover after parsing attributes in process `syz.2.27'. [ 87.126554][ T5924] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 88.122374][ T5972] Driver unsupported XDP return value 0 on prog (id 15) dev N/A, expect packet loss! [ 88.161901][ T5978] netlink: 'syz.1.44': attribute type 21 has an invalid length. [ 88.301068][ T5978] bond1: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 88.351835][ T5978] bond1 (unregistering): Released all slaves [ 89.201110][ T6030] ip6t_srh: unknown srh match flags 5F28 [ 89.286768][ T6031] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 89.294275][ T6031] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 89.433340][ T6037] syzkaller0: entered promiscuous mode [ 89.439697][ T6037] syzkaller0: entered allmulticast mode [ 89.684984][ T6043] netlink: 'syz.0.67': attribute type 15 has an invalid length. [ 89.692984][ T6043] __nla_validate_parse: 5 callbacks suppressed [ 89.692999][ T6043] netlink: 24 bytes leftover after parsing attributes in process `syz.0.67'. [ 89.891216][ T6062] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 90.066885][ T6065] netlink: 12 bytes leftover after parsing attributes in process `syz.1.74'. [ 90.134240][ T6072] netlink: 4 bytes leftover after parsing attributes in process `syz.2.76'. [ 90.168916][ T6072] netlink: 'syz.2.76': attribute type 39 has an invalid length. [ 90.195900][ T6072] hsr_slave_0: left promiscuous mode [ 90.232045][ T6072] hsr_slave_1: left promiscuous mode [ 90.464061][ T6090] netlink: 'syz.3.81': attribute type 1 has an invalid length. [ 90.541384][ T6092] netlink: 28 bytes leftover after parsing attributes in process `syz.3.81'. [ 90.573864][ T6090] netlink: 28 bytes leftover after parsing attributes in process `syz.3.81'. [ 90.629877][ T6098] bond1: (slave gre0): Device is not bonding slave [ 90.649041][ T6098] bond1: option active_slave: invalid value (gre0) [ 90.669746][ T6098] bond1 (unregistering): Released all slaves [ 90.733391][ T6090] macvlan0: entered promiscuous mode [ 90.745170][ T6090] macvlan0: entered allmulticast mode [ 90.750915][ T6090] veth1_vlan: entered allmulticast mode [ 90.907972][ T6099] netlink: 48 bytes leftover after parsing attributes in process `syz.2.83'. [ 90.930185][ T6099] netlink: 48 bytes leftover after parsing attributes in process `syz.2.83'. [ 91.010551][ T6117] netlink: 16 bytes leftover after parsing attributes in process `syz.1.87'. [ 91.133864][ T6123] tipc: Enabling of bearer rejected, failed to enable media [ 91.191965][ T6126] netlink: 'syz.0.90': attribute type 1 has an invalid length. [ 91.209957][ T6126] netlink: 28 bytes leftover after parsing attributes in process `syz.0.90'. [ 91.940990][ T6169] netlink: 8 bytes leftover after parsing attributes in process `syz.4.105'. [ 92.018021][ T6171] netlink: 'syz.3.104': attribute type 21 has an invalid length. [ 92.034036][ T6171] IPv6: NLM_F_CREATE should be specified when creating new route [ 92.065311][ T6171] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 92.073503][ T6171] IPv6: NLM_F_CREATE should be set when creating new route [ 92.080806][ T6171] IPv6: NLM_F_CREATE should be set when creating new route [ 92.088072][ T6171] IPv6: NLM_F_CREATE should be set when creating new route [ 92.168180][ T6177] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 92.184621][ T6179] netlink: 'syz.1.108': attribute type 11 has an invalid length. [ 92.220279][ T6177] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 92.275201][ T6180] smc: net device team0 applied user defined pnetid SYZ2 [ 92.284270][ T6183] ip_vti0: entered promiscuous mode [ 92.785931][ T6218] netlink: 'syz.4.121': attribute type 1 has an invalid length. [ 92.794004][ T6222] netlink: 'syz.1.120': attribute type 17 has an invalid length. [ 92.806355][ T6218] netlink: 'syz.4.121': attribute type 3 has an invalid length. [ 92.857472][ T6218] NCSI netlink: No device for ifindex 813332851 [ 92.871593][ T6229] Bluetooth: MGMT ver 1.23 [ 93.260216][ T6254] netlink: 'syz.4.123': attribute type 1 has an invalid length. [ 93.360082][ T6248] syzkaller0: entered promiscuous mode [ 93.366690][ T6248] syzkaller0: entered allmulticast mode [ 93.404538][ T6256] bond_slave_0: entered promiscuous mode [ 93.410899][ T6256] bond_slave_0: entered allmulticast mode [ 93.958746][ T6287] nbd: must specify an index to disconnect [ 95.571560][ T6331] __nla_validate_parse: 9 callbacks suppressed [ 95.571577][ T6331] netlink: 8 bytes leftover after parsing attributes in process `syz.1.143'. [ 95.619030][ T6338] netlink: 'syz.3.145': attribute type 21 has an invalid length. [ 95.667184][ T6338] netlink: 'syz.3.145': attribute type 21 has an invalid length. [ 95.933391][ T6335] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.941767][ T6335] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.095165][ T6367] xt_ipcomp: unknown flags 1D [ 96.099135][ T6335] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 96.126282][ T6369] netlink: 'syz.2.152': attribute type 1 has an invalid length. [ 96.244626][ T6369] 8021q: adding VLAN 0 to HW filter on device bond2 [ 96.440149][ T6389] netlink: 8 bytes leftover after parsing attributes in process `syz.3.155'. [ 96.648240][ T6400] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 97.044403][ T6428] Cannot find del_set index 0 as target [ 97.371784][ T6448] netlink: zone id is out of range [ 97.387646][ T6448] netlink: zone id is out of range [ 97.421152][ T6448] netlink: zone id is out of range [ 97.433463][ T6442] netlink: set zone limit has 4 unknown bytes [ 97.440052][ T6448] netlink: zone id is out of range [ 97.455594][ T6444] netlink: 52 bytes leftover after parsing attributes in process `syz.3.171'. [ 97.700339][ T6464] netlink: 104 bytes leftover after parsing attributes in process `syz.4.177'. [ 97.919549][ T6480] netlink: 12 bytes leftover after parsing attributes in process `syz.2.181'. [ 97.998070][ T6487] xt_l2tp: missing protocol rule (udp|l2tpip) [ 98.036690][ T6487] veth1_to_bond: entered allmulticast mode [ 98.232642][ T6502] tipc: Started in network mode [ 98.256097][ T6502] tipc: Node identity da83d85df036, cluster identity 4711 [ 98.292073][ T6502] tipc: Enabled bearer , priority 0 [ 98.351453][ T6511] netlink: 48 bytes leftover after parsing attributes in process `syz.0.189'. [ 98.389459][ T6502] tipc: Disabling bearer [ 98.440754][ T6485] veth1_to_bond: left allmulticast mode [ 98.601639][ T6523] netlink: 'syz.1.194': attribute type 12 has an invalid length. [ 98.638114][ T6523] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.194'. [ 98.643907][ T6528] x_tables: duplicate underflow at hook 2 [ 98.867317][ T6545] netlink: 104 bytes leftover after parsing attributes in process `syz.3.198'. [ 98.877210][ T6544] netlink: 104 bytes leftover after parsing attributes in process `syz.3.198'. [ 99.553400][ T6581] xt_hashlimit: size too large, truncated to 1048576 [ 99.558057][ T6585] netlink: 32 bytes leftover after parsing attributes in process `syz.3.206'. [ 99.654217][ T6592] xt_connbytes: Forcing CT accounting to be enabled [ 99.669780][ T6585] gretap0: entered promiscuous mode [ 99.787333][ T6580] xt_hashlimit: size too large, truncated to 1048576 [ 99.805059][ T6596] netlink: 'syz.4.208': attribute type 22 has an invalid length. [ 99.855720][ T6596] netlink: 'syz.4.208': attribute type 22 has an invalid length. [ 100.029422][ T6611] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 100.099327][ T6611] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 100.162577][ T6611] bond0 (unregistering): Released all slaves [ 100.960918][ T6643] __nla_validate_parse: 5 callbacks suppressed [ 100.960938][ T6643] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.218'. [ 101.156664][ T6661] netlink: 28 bytes leftover after parsing attributes in process `syz.3.222'. [ 101.216983][ T6661] netlink: 28 bytes leftover after parsing attributes in process `syz.3.222'. [ 101.257099][ T6661] netlink: 28 bytes leftover after parsing attributes in process `syz.3.222'. [ 101.276467][ T6661] netlink: 28 bytes leftover after parsing attributes in process `syz.3.222'. [ 101.330135][ T6661] netlink: 28 bytes leftover after parsing attributes in process `syz.3.222'. [ 101.374769][ T24] IPVS: starting estimator thread 0... [ 101.397604][ T6661] netlink: 28 bytes leftover after parsing attributes in process `syz.3.222'. [ 101.425150][ T6661] netlink: 28 bytes leftover after parsing attributes in process `syz.3.222'. [ 101.445386][ T6661] netlink: 28 bytes leftover after parsing attributes in process `syz.3.222'. [ 101.460923][ T6661] netlink: 28 bytes leftover after parsing attributes in process `syz.3.222'. [ 101.492858][ T6679] IPVS: using max 28 ests per chain, 67200 per kthread [ 102.381657][ T6739] netlink: 'syz.2.237': attribute type 178 has an invalid length. [ 102.800479][ T6757] netlink: 'syz.2.242': attribute type 5 has an invalid length. [ 102.814029][ T6765] netlink: 'syz.4.244': attribute type 29 has an invalid length. [ 103.368990][ T6790] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 103.378287][ T809] IPVS: starting estimator thread 0... [ 103.483151][ T6795] IPVS: using max 40 ests per chain, 96000 per kthread [ 103.580824][ T6797] syzkaller0: entered promiscuous mode [ 103.586576][ T6797] syzkaller0: entered allmulticast mode [ 103.616427][ T6805] sctp: [Deprecated]: syz.1.258 (pid 6805) Use of struct sctp_assoc_value in delayed_ack socket option. [ 103.616427][ T6805] Use struct sctp_sack_info instead [ 103.633415][ T6806] netlink: 'syz.3.257': attribute type 2 has an invalid length. [ 103.634678][ T48] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 103.655096][ T48] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.972059][ T48] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 105.017471][ T48] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 105.412219][ T6848] netlink: 'syz.1.265': attribute type 17 has an invalid length. [ 105.463568][ T6848] gretap0: entered promiscuous mode [ 105.487491][ T6848] gretap0: left promiscuous mode [ 105.637049][ T6862] veth0: entered promiscuous mode [ 105.649248][ T6862] veth0: left promiscuous mode [ 105.909046][ T6878] IPVS: set_ctl: invalid protocol: 51 172.30.1.2:20002 [ 106.245932][ T6903] __nla_validate_parse: 40 callbacks suppressed [ 106.247566][ T6903] netlink: 8 bytes leftover after parsing attributes in process `syz.3.279'. [ 106.267721][ T6903] netlink: 8 bytes leftover after parsing attributes in process `syz.3.279'. [ 106.305448][ T6903] xt_TPROXY: Can be used only with -p tcp or -p udp [ 106.535570][ T6916] netlink: 36 bytes leftover after parsing attributes in process `syz.3.283'. [ 106.575510][ T6916] netlink: 16 bytes leftover after parsing attributes in process `syz.3.283'. [ 106.616634][ T6924] netlink: 45349 bytes leftover after parsing attributes in process `syz.3.283'. [ 106.661340][ T6916] netlink: 36 bytes leftover after parsing attributes in process `syz.3.283'. [ 107.046856][ T6924] 0ªX¹¦Dö»: renamed from gretap0 [ 107.059418][ T6924] 0ªX¹¦Dö»: left promiscuous mode [ 107.065100][ T6924] 0ªX¹¦Dö»: entered allmulticast mode [ 107.250849][ T6942] trusted_key: syz.2.287 sent an empty control message without MSG_MORE. [ 107.384518][ T6950] blkio.reset_stats is deprecated [ 107.541149][ T6956] netlink: 20 bytes leftover after parsing attributes in process `syz.4.291'. [ 107.664607][ T6966] netlink: 212344 bytes leftover after parsing attributes in process `syz.2.292'. [ 107.807483][ T6972] syz_tun: entered allmulticast mode [ 107.958891][ T6971] syz_tun: left allmulticast mode [ 108.737188][ T7020] netlink: 8 bytes leftover after parsing attributes in process `syz.4.308'. [ 109.017282][ T29] audit: type=1804 audit(1781495464.670:2): pid=7044 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.314" name="/newroot/62/cgroup.controllers" dev="tmpfs" ino=332 res=1 errno=0 [ 109.083811][ T29] audit: type=1800 audit(1781495464.690:3): pid=7044 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.314" name="cgroup.controllers" dev="tmpfs" ino=332 res=0 errno=0 [ 109.133153][ T7052] tipc: Trying to set illegal importance in message [ 109.209382][ T7055] tipc: Trying to set illegal importance in message [ 109.616884][ T7082] netlink: 4 bytes leftover after parsing attributes in process `syz.1.324'. [ 110.507112][ T7124] x_tables: duplicate underflow at hook 2 [ 110.541204][ T7128] sch_tbf: burst 7 is lower than device syzkaller0 mtu (1514) ! [ 110.578746][ T7128] netem: change failed [ 111.192428][ T7173] netlink: 'syz.3.347': attribute type 4 has an invalid length. [ 111.214740][ T7172] syzkaller0: entered promiscuous mode [ 111.229233][ T7172] syzkaller0: entered allmulticast mode [ 111.360762][ T7175] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 111.375672][ T7177] __nla_validate_parse: 4 callbacks suppressed [ 111.375689][ T7177] netlink: 8 bytes leftover after parsing attributes in process `syz.3.349'. [ 111.408788][ T7179] netlink: 'syz.0.350': attribute type 24 has an invalid length. [ 111.419119][ T7177] IPv6: NLM_F_REPLACE set, but no existing node found! [ 111.786590][ T7204] netlink: 8 bytes leftover after parsing attributes in process `syz.0.358'. [ 111.835471][ T7200] bond0: entered promiscuous mode [ 111.850339][ T7204] gtp0: entered promiscuous mode [ 111.857547][ T7196] nbd0: detected capacity change from 0 to 127 [ 111.858991][ T7204] gtp0: entered allmulticast mode [ 111.872499][ T5635] block nbd0: Receive control failed (result -104) [ 111.877306][ T7201] macvlan2: entered promiscuous mode [ 111.885009][ T7201] macvlan2: entered allmulticast mode [ 111.891900][ T7201] bond0: (slave macvlan2): Opening slave failed [ 111.975017][ T7200] netlink: 8 bytes leftover after parsing attributes in process `syz.2.356'. [ 112.727186][ T7254] netlink: 204 bytes leftover after parsing attributes in process `syz.1.369'. [ 112.770351][ T7257] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 112.937587][ T7269] netlink: 44 bytes leftover after parsing attributes in process `syz.0.376'. [ 113.212446][ T7297] netlink: 24 bytes leftover after parsing attributes in process `syz.1.381'. [ 113.239041][ T7297] netlink: 'syz.1.381': attribute type 3 has an invalid length. [ 113.249352][ T7297] netlink: 24 bytes leftover after parsing attributes in process `syz.1.381'. [ 113.260171][ T7297] netlink: 'syz.1.381': attribute type 3 has an invalid length. [ 113.300275][ T7300] netlink: 104 bytes leftover after parsing attributes in process `syz.0.379'. [ 113.919247][ T7336] netlink: 8 bytes leftover after parsing attributes in process `syz.2.390'. [ 113.961310][ T7338] netlink: 4 bytes leftover after parsing attributes in process `syz.4.393'. [ 114.160551][ T7344] netlink: 'syz.0.396': attribute type 11 has an invalid length. [ 114.193343][ T7346] bond1: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 114.205410][ T7346] bond1 (unregistering): Released all slaves [ 115.039848][ T7390] veth1_macvtap: left promiscuous mode [ 115.064632][ T7390] macsec0: entered promiscuous mode [ 115.092909][ T7390] macsec0: entered allmulticast mode [ 115.126934][ T7399] veth1_macvtap: entered promiscuous mode [ 115.145677][ T7399] veth1_macvtap: entered allmulticast mode [ 115.156289][ T7399] macsec0: left promiscuous mode [ 115.161921][ T7399] macsec0: left allmulticast mode [ 115.161959][ T7401] netlink: 'syz.4.414': attribute type 12 has an invalid length. [ 115.167842][ T7399] veth1_macvtap: left allmulticast mode [ 115.306933][ T7408] netlink: 'syz.4.414': attribute type 11 has an invalid length. [ 115.331820][ T7412] netlink: 'syz.2.413': attribute type 1 has an invalid length. [ 115.332244][ T7401] bond1: option primary_reselect: invalid value (255) [ 115.351384][ T7401] bond1 (unregistering): Released all slaves [ 115.480735][ T7414] syzkaller1: entered promiscuous mode [ 115.494255][ T7414] syzkaller1: entered allmulticast mode [ 115.528366][ T7402] netlink: 'syz.2.413': attribute type 1 has an invalid length. [ 115.560753][ T7402] netlink: 'syz.2.413': attribute type 1 has an invalid length. [ 115.736377][ T7427] syzkaller1: entered promiscuous mode [ 115.742253][ T7427] syzkaller1: entered allmulticast mode [ 115.769310][ T7436] pim6reg: entered allmulticast mode [ 115.775498][ T7438] pim6reg: left allmulticast mode [ 115.788737][ T7398] netlink: 'syz.2.413': attribute type 1 has an invalid length. [ 116.163242][ T7457] Bluetooth: MGMT ver 1.23 [ 116.238415][ T7457] syzkaller1: tun_chr_ioctl cmd 1074288757 [ 116.246981][ T7457] syzkaller1: tun_chr_ioctl cmd 1074025678 [ 116.254688][ T7457] syzkaller1: group set to 0 [ 116.567057][ T7479] __nla_validate_parse: 12 callbacks suppressed [ 116.567075][ T7479] netlink: 24 bytes leftover after parsing attributes in process `syz.1.436'. [ 116.591919][ T7482] validate_nla: 1 callbacks suppressed [ 116.591935][ T7482] netlink: 'syz.2.438': attribute type 3 has an invalid length. [ 116.616527][ T7482] netlink: 16 bytes leftover after parsing attributes in process `syz.2.438'. [ 116.925088][ T1179] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x6 [ 117.495909][ T7527] netlink: 'syz.2.449': attribute type 6 has an invalid length. [ 117.525352][ T7527] netlink: 12 bytes leftover after parsing attributes in process `syz.2.449'. [ 117.850200][ T7545] netlink: 'syz.1.453': attribute type 1 has an invalid length. [ 117.987157][ T7545] 8021q: adding VLAN 0 to HW filter on device bond1 [ 118.088409][ T7546] bond1: (slave geneve2): making interface the new active one [ 118.110610][ T7546] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 118.124083][ T7541] netlink: 16 bytes leftover after parsing attributes in process `syz.2.452'. [ 118.139994][ T7541] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.452'. [ 118.234059][ T7569] netlink: 40 bytes leftover after parsing attributes in process `syz.0.457'. [ 118.258854][ T7554] bond1 (unregistering): Released all slaves [ 118.296802][ T7572] netlink: 7064 bytes leftover after parsing attributes in process `syz.1.458'. [ 118.335967][ T7572] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 118.432339][ T7557] ipvlan2: entered allmulticast mode [ 118.451838][ T7557] batadv_slave_1: entered allmulticast mode [ 118.478348][ T7557] batman_adv: batadv0: Adding interface: ipvlan2 [ 118.515987][ T7557] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 118.553501][ T7557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.573869][ T7557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.587930][ T7557] batman_adv: batadv0: Interface activated: ipvlan2 [ 118.617200][ T7573] syzkaller0: entered promiscuous mode [ 118.631286][ T7573] syzkaller0: entered allmulticast mode [ 118.845407][ T7593] netlink: 104 bytes leftover after parsing attributes in process `syz.4.463'. [ 119.975531][ T7653] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.479'. [ 120.064910][ T7661] netlink: 16 bytes leftover after parsing attributes in process `syz.1.480'. [ 122.018011][ T7683] ip6erspan0: entered allmulticast mode [ 122.210167][ T7719] netlink: 'syz.0.494': attribute type 4 has an invalid length. [ 122.241664][ T7719] tc_dump_action: action bad kind [ 122.469831][ T7729] netlink: 144 bytes leftover after parsing attributes in process `syz.3.497'. [ 122.605338][ T7737] syzkaller1: entered promiscuous mode [ 122.631605][ T7737] syzkaller1: entered allmulticast mode [ 122.730637][ T7743] netlink: 4 bytes leftover after parsing attributes in process `syz.0.502'. [ 123.219806][ T7763] netlink: 4 bytes leftover after parsing attributes in process `syz.0.510'. [ 123.230547][ T7757] netlink: 28 bytes leftover after parsing attributes in process `syz.1.508'. [ 123.256975][ T7763] netlink: 4 bytes leftover after parsing attributes in process `syz.0.510'. [ 123.268129][ T7757] netlink: 104 bytes leftover after parsing attributes in process `syz.1.508'. [ 123.276583][ T7768] netlink: 128 bytes leftover after parsing attributes in process `syz.4.511'. [ 123.306630][ T7768] netlink: 20 bytes leftover after parsing attributes in process `syz.4.511'. [ 123.331426][ T7763] wireguard0: entered promiscuous mode [ 123.368637][ T7761] netlink: 8 bytes leftover after parsing attributes in process `syz.4.511'. [ 123.894444][ T7803] netlink: 12 bytes leftover after parsing attributes in process `syz.1.521'. [ 123.925014][ T7807] x_tables: duplicate underflow at hook 1 [ 124.504279][ T7843] netlink: 'syz.1.533': attribute type 1 has an invalid length. [ 124.516291][ T7842] netlink: 'syz.1.533': attribute type 1 has an invalid length. [ 124.750228][ T7852] openvswitch: netlink: Flow key attr not present in new flow. [ 124.819978][ T7857] netem: change failed [ 125.075411][ T7869] netlink: 'syz.2.542': attribute type 1 has an invalid length. [ 125.320514][ T7885] tipc: Started in network mode [ 125.326588][ T7885] tipc: Node identity ac14140f, cluster identity 4711 [ 125.336718][ T7885] tipc: New replicast peer: 255.255.255.255 [ 125.354628][ T7885] tipc: Enabled bearer , priority 10 [ 125.448747][ T7893] xt_CONNSECMARK: invalid mode: 0 [ 125.758801][ T7903] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 125.794999][ T7906] ip6tnl2: entered promiscuous mode [ 125.985249][ T7919] netlink: 'syz.2.556': attribute type 61 has an invalid length. [ 126.016399][ T7916] gtp1: entered allmulticast mode [ 126.042206][ T7916] team0: Device gtp1 is of different type [ 126.235707][ T7922] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 126.272918][ T7922] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 126.302051][ T7922] gretap1: entered promiscuous mode [ 126.332186][ T7922] gretap1: entered allmulticast mode [ 126.519859][ T24] tipc: Node number set to 2886997007 [ 126.598861][ T7942] veth0_to_bridge: vlans aren't supported yet for dev_uc|mc_add() [ 126.875400][ T7944] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.145247][ T7944] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.415509][ T7944] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.472128][ T7978] vlan0: entered promiscuous mode [ 127.636360][ T7944] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.671969][ T7983] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 127.886563][ T7989] veth0: entered promiscuous mode [ 127.911923][ T57] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.912830][ T7993] openvswitch: netlink: Geneve opt len 5 is not a multiple of 4. [ 127.944850][ T7989] veth0: left promiscuous mode [ 128.001918][ T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.151604][ T136] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.195895][ T8000] syzkaller0: entered promiscuous mode [ 128.211596][ T8000] syzkaller0: entered allmulticast mode [ 128.230041][ T8002] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 128.266943][ T136] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.908435][ T8034] syzkaller0: entered promiscuous mode [ 128.915884][ T8034] syzkaller0: entered allmulticast mode [ 129.668233][ T8048] __nla_validate_parse: 25 callbacks suppressed [ 129.668253][ T8048] netlink: 212360 bytes leftover after parsing attributes in process `syz.4.594'. [ 131.283515][ T8004] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 131.695161][ T8080] netlink: 'syz.3.604': attribute type 23 has an invalid length. [ 131.716422][ T8076] Bluetooth: MGMT ver 1.23 [ 131.844961][ T8083] netlink: 'syz.1.606': attribute type 1 has an invalid length. [ 131.870098][ T8083] netlink: 'syz.1.606': attribute type 1 has an invalid length. [ 132.054941][ T8101] netlink: 8 bytes leftover after parsing attributes in process `syz.1.610'. [ 132.128681][ T8101] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 132.148130][ T8107] netlink: 68 bytes leftover after parsing attributes in process `syz.3.612'. [ 132.157424][ T8101] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 132.169309][ T8101] gretap1: entered promiscuous mode [ 132.177431][ T8101] gretap1: entered allmulticast mode [ 132.444291][ T8123] xt_hashlimit: overflow, try lower: 3/0 [ 132.637629][ T8138] syzkaller0: entered promiscuous mode [ 132.649665][ T8138] syzkaller0: entered allmulticast mode [ 132.707577][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.716707][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.742482][ T8139] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.751375][ T8139] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.798206][ T8142] bond_slave_0: left promiscuous mode [ 132.902375][ T8142] ip6tnl2: left promiscuous mode [ 132.921437][ T8142] gretap1: left promiscuous mode [ 133.405349][ T8187] netlink: 288 bytes leftover after parsing attributes in process `syz.1.625'. [ 133.519606][ T8195] xt_CT: You must specify a L4 protocol and not use inversions on it [ 133.656311][ T8195] netlink: 'syz.2.630': attribute type 1 has an invalid length. [ 133.714174][ T8195] netlink: 224 bytes leftover after parsing attributes in process `syz.2.630'. [ 134.171474][ T8222] netlink: 'syz.0.636': attribute type 3 has an invalid length. [ 134.218640][ T8227] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 134.251748][ T8231] netlink: 12 bytes leftover after parsing attributes in process `syz.4.639'. [ 134.388353][ T8235] 8021q: adding VLAN 0 to HW filter on device bond0 [ 134.772456][ T8256] veth1_macvtap: left promiscuous mode [ 134.805176][ T8258] netlink: 12 bytes leftover after parsing attributes in process `syz.3.647'. [ 134.850425][ T8258] netlink: 12 bytes leftover after parsing attributes in process `syz.3.647'. [ 135.006367][ T8271] bond4: entered promiscuous mode [ 135.012577][ T8271] bond4: entered allmulticast mode [ 135.021705][ T8271] 8021q: adding VLAN 0 to HW filter on device bond4 [ 135.046158][ T8280] H: renamed from dummy0 (while UP) [ 135.180523][ T8282] netlink: 20 bytes leftover after parsing attributes in process `syz.3.653'. [ 135.289801][ T8299] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 135.366574][ T8303] netlink: 32 bytes leftover after parsing attributes in process `syz.2.656'. [ 135.377298][ T8303] netlink: 4 bytes leftover after parsing attributes in process `syz.2.656'. [ 135.435405][ T8299] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 135.460676][ T8281] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 135.509914][ T8298] erspan0: entered promiscuous mode [ 135.525463][ T8298] netlink: 8 bytes leftover after parsing attributes in process `syz.1.658'. [ 135.731676][ T8317] netlink: 8 bytes leftover after parsing attributes in process `syz.4.660'. [ 135.744124][ T8316] netlink: 20 bytes leftover after parsing attributes in process `syz.2.663'. [ 135.761007][ T8317] netlink: 8 bytes leftover after parsing attributes in process `syz.4.660'. [ 135.989926][ T8330] netlink: 8 bytes leftover after parsing attributes in process `syz.2.665'. [ 136.793590][ T29] audit: type=1804 audit(1781495492.450:4): pid=8367 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.673" name="/newroot/132/cgroup.controllers" dev="tmpfs" ino=692 res=1 errno=0 [ 136.881412][ T29] audit: type=1800 audit(1781495492.470:5): pid=8367 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.673" name="cgroup.controllers" dev="tmpfs" ino=692 res=0 errno=0 [ 136.896515][ T8373] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 136.955111][ T8377] openvswitch: netlink: Missing key (keys=40, expected=80) [ 137.301276][ T8398] bridge4: entered promiscuous mode [ 137.313563][ T8398] bridge4: entered allmulticast mode [ 137.371337][ T8400] : entered promiscuous mode [ 137.384600][ T8409] team1 (uninitialized): Failed to send options change via netlink (err -105) [ 137.494724][ T8409] team1: entered promiscuous mode [ 137.500241][ T8409] team1: entered allmulticast mode [ 137.730369][ T8424] xt_cluster: you have exceeded the maximum number of cluster nodes (2048 > 32) [ 137.804296][ T8424] syz_tun: entered allmulticast mode [ 137.822444][ T8395] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 138.078703][ T8438] netlink: 'syz.2.695': attribute type 8 has an invalid length. [ 138.641272][ T8462] tipc: Failed to obtain node identity [ 138.657705][ T8462] tipc: Enabling of bearer rejected, failed to enable media [ 138.880699][ T8479] vlan2: entered allmulticast mode [ 138.906474][ T8479] gretap0: entered allmulticast mode [ 139.210123][ T8496] netlink: 'syz.4.710': attribute type 1 has an invalid length. [ 139.381019][ T8505] netlink: 'syz.0.716': attribute type 1 has an invalid length. [ 139.761632][ T8530] netlink: 'syz.2.723': attribute type 2 has an invalid length. [ 139.775910][ T8530] netlink: 'syz.2.723': attribute type 2 has an invalid length. [ 139.828512][ T8530] __nla_validate_parse: 13 callbacks suppressed [ 139.828529][ T8530] netlink: 67 bytes leftover after parsing attributes in process `syz.2.723'. [ 139.970500][ T8538] syzkaller0: entered promiscuous mode [ 140.017351][ T8538] syzkaller0: entered allmulticast mode [ 140.106976][ T8552] netlink: 12 bytes leftover after parsing attributes in process `syz.0.731'. [ 140.184787][ T8555] sctp: [Deprecated]: syz.1.732 (pid 8555) Use of int in max_burst socket option deprecated. [ 140.184787][ T8555] Use struct sctp_assoc_value instead [ 140.319516][ T8562] syz_tun: entered allmulticast mode [ 140.369003][ T8569] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 140.371409][ T8563] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 140.427944][ T29] audit: type=1804 audit(1781495496.080:6): pid=8573 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.735" name="/newroot/159/cgroup.controllers" dev="tmpfs" ino=830 res=1 errno=0 [ 140.434143][ T8563] netlink: 40 bytes leftover after parsing attributes in process `syz.1.735'. [ 140.490564][ T29] audit: type=1800 audit(1781495496.080:7): pid=8573 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.735" name="cgroup.controllers" dev="tmpfs" ino=830 res=0 errno=0 [ 140.570238][ T29] audit: type=1800 audit(1781495496.080:8): pid=8563 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.735" name="cgroup.controllers" dev="tmpfs" ino=830 res=0 errno=0 [ 140.799055][ T8589] netlink: 4 bytes leftover after parsing attributes in process `syz.0.742'. [ 140.967670][ T8595] Cannot find del_set index 2 as target [ 140.984768][ T8595] netlink: 40 bytes leftover after parsing attributes in process `syz.3.744'. [ 141.323864][ T8608] syzkaller0: entered promiscuous mode [ 141.349299][ T8608] syzkaller0: entered allmulticast mode [ 142.141574][ T8661] netlink: 'syz.0.753': attribute type 10 has an invalid length. [ 142.308547][ T25] block nbd0: Possible stuck request ffff888027555240: control (read@1024,1024B). Runtime 30 seconds [ 142.321594][ T25] block nbd0: Possible stuck request ffff888027555400: control (read@2048,1024B). Runtime 30 seconds [ 142.333220][ T25] block nbd0: Possible stuck request ffff8880275555c0: control (read@3072,1024B). Runtime 30 seconds [ 142.344516][ T25] block nbd0: Possible stuck request ffff888027555080: control (read@0,1024B). Runtime 30 seconds [ 143.124720][ T8665] netlink: 'syz.2.755': attribute type 1 has an invalid length. [ 143.301533][ T8668] netlink: 28 bytes leftover after parsing attributes in process `syz.2.755'. [ 143.813101][ T8670] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 144.239367][ T8702] --map-set only usable from mangle table [ 144.252064][ T8701] netlink: 4 bytes leftover after parsing attributes in process `syz.3.766'. [ 144.279371][ T8701] team2 (uninitialized): Failed to send options change via netlink (err -105) [ 144.310103][ T8701] team2: entered promiscuous mode [ 144.319431][ T8701] team2: entered allmulticast mode [ 144.504000][ T8719] netlink: 8 bytes leftover after parsing attributes in process `syz.1.771'. [ 144.568985][ T8729] geneve3: entered promiscuous mode [ 144.574470][ T8729] geneve3: entered allmulticast mode [ 144.587172][ T35] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 144.615704][ T35] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 144.655475][ T35] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 144.676734][ T35] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 144.919929][ T8735] tipc: Started in network mode [ 144.930279][ T8735] tipc: Node identity 12730f88238d, cluster identity 4711 [ 144.939573][ T8735] tipc: Enabled bearer , priority 0 [ 145.096814][ T8758] netlink: 36 bytes leftover after parsing attributes in process `syz.1.783'. [ 145.100349][ T8737] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 145.119488][ T8737] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 145.230413][ T8769] netlink: 256 bytes leftover after parsing attributes in process `syz.4.781'. [ 145.326346][ T8746] syzkaller0: entered promiscuous mode [ 145.331842][ T8746] syzkaller0: entered allmulticast mode [ 145.339235][ T8746] tipc: Resetting bearer [ 145.347873][ T8757] lo: entered allmulticast mode [ 145.363289][ T136] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.383016][ T136] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 19999 - 0 [ 145.395385][ T136] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.406731][ T136] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 19999 - 0 [ 145.433842][ T8734] tipc: Resetting bearer [ 146.830073][ T8734] tipc: Disabling bearer [ 146.869659][ T136] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.887298][ T136] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 19999 - 0 [ 146.896925][ T136] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.907110][ T136] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 19999 - 0 [ 147.014485][ T808] tipc: Node number set to 838733704 [ 147.026206][ T57] bond0: (slave bond_slave_0): link status definitely down, disabling slave [ 147.310750][ T8805] netlink: 16 bytes leftover after parsing attributes in process `syz.4.795'. [ 147.365115][ T8808] netlink: 24 bytes leftover after parsing attributes in process `syz.1.797'. [ 147.421176][ T8808] netlink: 72 bytes leftover after parsing attributes in process `syz.1.797'. [ 147.619748][ T8821] netlink: 24 bytes leftover after parsing attributes in process `syz.0.802'. [ 147.866031][ T8830] sctp: [Deprecated]: syz.0.806 (pid 8830) Use of int in maxseg socket option. [ 147.866031][ T8830] Use struct sctp_assoc_value instead [ 147.939692][ T8830] netlink: 16 bytes leftover after parsing attributes in process `syz.0.806'. [ 148.311572][ T8852] netlink: 'syz.2.812': attribute type 29 has an invalid length. [ 148.337521][ T8852] netlink: 8 bytes leftover after parsing attributes in process `syz.2.812'. [ 148.489390][ T8859] netlink: 'syz.1.815': attribute type 1 has an invalid length. [ 148.535788][ T8866] netlink: 24 bytes leftover after parsing attributes in process `syz.2.817'. [ 148.877703][ T8886] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 148.905699][ T8887] netlink: 12 bytes leftover after parsing attributes in process `syz.0.823'. [ 148.936872][ T8887] netlink: 'syz.0.823': attribute type 3 has an invalid length. [ 149.125120][ T8904] IPVS: set_ctl: invalid protocol: 46 172.30.0.2:20003 [ 149.729630][ T8939] netlink: 'syz.2.838': attribute type 1 has an invalid length. [ 149.879262][ T8939] bond5: entered promiscuous mode [ 149.885052][ T8939] 8021q: adding VLAN 0 to HW filter on device bond5 [ 150.128180][ T8955] __nla_validate_parse: 8 callbacks suppressed [ 150.128198][ T8955] netlink: 48 bytes leftover after parsing attributes in process `syz.0.843'. [ 150.189296][ T8958] netlink: 'syz.1.845': attribute type 1 has an invalid length. [ 150.221982][ T8961] x_tables: unsorted underflow at hook 4 [ 150.258001][ T8958] bond2: (slave geneve3): making interface the new active one [ 150.274629][ T8958] bond2: (slave geneve3): Enslaving as an active interface with an up link [ 150.284237][ T13] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 150.310097][ T13] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 150.310843][ T8966] netlink: 'syz.0.847': attribute type 1 has an invalid length. [ 150.365829][ T13] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 150.481892][ T8966] 8021q: adding VLAN 0 to HW filter on device bond1 [ 150.537062][ T13] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 150.886390][ T8994] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 150.918429][ T8994] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 150.942310][ T8994] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 151.109658][ T9014] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 151.362365][ T9030] bridge_slave_0 (unregistering): left allmulticast mode [ 151.370796][ T9030] bridge_slave_0 (unregistering): left promiscuous mode [ 151.378581][ T9030] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.557890][ T9041] netlink: 156 bytes leftover after parsing attributes in process `syz.1.870'. [ 151.581409][ T9043] netlink: 160 bytes leftover after parsing attributes in process `syz.3.869'. [ 151.836269][ T9039] x_tables: unsorted entry at hook 3 [ 151.883603][ T9066] netlink: 28 bytes leftover after parsing attributes in process `syz.3.874'. [ 152.142192][ T9080] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 152.159802][ T9080] gtp0: left promiscuous mode [ 152.171381][ T9080] gtp0: left allmulticast mode [ 152.193098][ T9086] netlink: 8 bytes leftover after parsing attributes in process `syz.0.877'. [ 152.213060][ T9080] geneve3: left promiscuous mode [ 152.226038][ T9086] netlink: 12 bytes leftover after parsing attributes in process `syz.0.877'. [ 152.227550][ T9080] geneve3: left allmulticast mode [ 152.297201][ T9092] netlink: 8 bytes leftover after parsing attributes in process `syz.2.881'. [ 152.520620][ T9103] netlink: 8 bytes leftover after parsing attributes in process `syz.1.885'. [ 152.566009][ T9107] netlink: 24 bytes leftover after parsing attributes in process `syz.2.886'. [ 152.604099][ T9107] bond0: ARP target 8.4.0.0 is already present [ 152.610533][ T9107] bond0: option arp_ip_target: invalid value (1032) [ 152.630714][ T9113] netlink: 'syz.0.888': attribute type 12 has an invalid length. [ 152.661719][ T9113] netlink: 'syz.0.888': attribute type 29 has an invalid length. [ 152.689985][ T9113] netlink: 'syz.0.888': attribute type 1 has an invalid length. [ 152.711962][ T9113] netlink: 'syz.0.888': attribute type 2 has an invalid length. [ 152.924580][ T9124] netlink: 8 bytes leftover after parsing attributes in process `syz.3.890'. [ 152.967625][ T9124] veth1_vlan: left allmulticast mode [ 152.984001][ T9124] veth1_vlan: left promiscuous mode [ 153.002639][ T9124] macvlan0: left promiscuous mode [ 153.028847][ T9124] macvlan0: left allmulticast mode [ 153.041401][ T9135] atomic_op ffff888031871998 conn xmit_atomic 0000000000000000 [ 153.304532][ T9130] nbd1: detected capacity change from 0 to 63 [ 153.328215][ T5635] block nbd1: Receive control failed (result -32) [ 153.329785][ T6891] block nbd1: Send control failed (result -32) [ 153.336102][ T5649] block nbd1: Receive control failed (result -32) [ 153.370074][ T6891] block nbd1: Request send failed, requeueing [ 153.445981][ T6891] block nbd1: Dead connection, failed to find a fallback [ 153.484541][ T25] block nbd1: shutting down sockets [ 153.490998][ T25] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 153.501904][ T6891] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 153.502260][ T6891] Buffer I/O error on dev nbd1, logical block 1, async page read [ 153.502638][ T6891] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 153.516502][ T25] Buffer I/O error on dev nbd1, logical block 0, async page read [ 153.572558][ T6891] Buffer I/O error on dev nbd1, logical block 2, async page read [ 153.581116][ T6891] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 153.591943][ T6891] Buffer I/O error on dev nbd1, logical block 3, async page read [ 153.601381][ T6891] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 153.610598][ T6891] Buffer I/O error on dev nbd1, logical block 0, async page read [ 153.622986][ T6891] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 153.643076][ T6891] Buffer I/O error on dev nbd1, logical block 1, async page read [ 153.651111][ T6891] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 153.670190][ T6891] Buffer I/O error on dev nbd1, logical block 2, async page read [ 153.693009][ T6891] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 153.722972][ T6891] Buffer I/O error on dev nbd1, logical block 3, async page read [ 153.725318][ T9165] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 153.735571][ T6891] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 153.763470][ T9167] netlink: 'syz.2.903': attribute type 1 has an invalid length. [ 153.779847][ T6891] Buffer I/O error on dev nbd1, logical block 0, async page read [ 153.796882][ T9161] raw_sendmsg: syz.0.901 forgot to set AF_INET. Fix it! [ 153.798984][ T6891] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 153.824304][ T6891] Buffer I/O error on dev nbd1, logical block 1, async page read [ 153.837824][ T6891] ldm_validate_partition_table(): Disk read failed. [ 153.848313][ T6891] Dev nbd1: unable to read RDB block 0 [ 153.858289][ T6891] nbd1: unable to read partition table [ 153.874736][ T6891] ldm_validate_partition_table(): Disk read failed. [ 153.888401][ T6891] Dev nbd1: unable to read RDB block 0 [ 153.896743][ T6891] nbd1: unable to read partition table [ 153.900003][ T9167] bond6: entered promiscuous mode [ 153.908750][ T5649] Bluetooth: hci4: command tx timeout [ 153.918532][ T9167] 8021q: adding VLAN 0 to HW filter on device bond6 [ 153.995271][ T9175] bond6: (slave bridge3): making interface the new active one [ 154.004044][ T9175] bridge3: entered promiscuous mode [ 154.010789][ T9175] bond6: (slave bridge3): Enslaving as an active interface with an up link [ 154.158313][ T9193] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 154.182783][ T9193] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:4096 [ 154.219689][ T9192] erspan0: entered promiscuous mode [ 154.239975][ T9193] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 154.256544][ T9199] tipc: Started in network mode [ 154.269965][ T9199] tipc: Node identity da2493281826, cluster identity 4711 [ 154.298844][ T9199] tipc: Enabled bearer , priority 0 [ 154.327764][ T9200] syzkaller0: entered promiscuous mode [ 154.351006][ T9200] syzkaller0: entered allmulticast mode [ 154.366288][ T9203] IPVS: set_ctl: invalid protocol: 137 100.1.1.0:20002 [ 154.480687][ T9199] tipc: Resetting bearer [ 154.487046][ T9199] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.496649][ T9199] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.509837][ T9212] netlink: 'syz.1.915': attribute type 10 has an invalid length. [ 154.522583][ T9211] netlink: 'syz.1.915': attribute type 10 has an invalid length. [ 154.567649][ T9212] 8021q: adding VLAN 0 to HW filter on device team0 [ 154.584050][ T9212] bond0: (slave team0): Enslaving as an active interface with an up link [ 154.616691][ T9198] tipc: Resetting bearer [ 154.637611][ T9198] tipc: Disabling bearer [ 154.894374][ T9236] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 154.896271][ T9240] netlink: 'syz.4.921': attribute type 2 has an invalid length. [ 154.930124][ T9236] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 154.957676][ T9241] netlink: 'syz.4.921': attribute type 2 has an invalid length. [ 154.967083][ T9236] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 154.981315][ T9236] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 155.009773][ T9244] team0: entered promiscuous mode [ 155.022930][ T9244] team_slave_0: entered promiscuous mode [ 155.033599][ T9244] team_slave_1: entered promiscuous mode [ 155.374905][ T5649] Bluetooth: hci4: link tx timeout [ 155.382343][ T5649] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 155.398239][ T9266] netlink: 'syz.4.930': attribute type 11 has an invalid length. [ 155.424787][ T9266] __nla_validate_parse: 6 callbacks suppressed [ 155.424803][ T9266] netlink: 228 bytes leftover after parsing attributes in process `syz.4.930'. [ 156.530032][ T9286] bond3: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 156.549679][ T9286] bond3 (unregistering): Released all slaves [ 156.824202][ T9309] netlink: 8 bytes leftover after parsing attributes in process `syz.0.941'. [ 156.899173][ T9315] geneve4: entered promiscuous mode [ 156.916900][ T9320] x_tables: duplicate underflow at hook 1 [ 156.921217][ T9315] geneve4: entered allmulticast mode [ 156.931791][ T8180] netdevsim netdevsim1 eth0: set [1, 2] type 2 family 0 port 19999 - 0 [ 156.948167][ T8180] netdevsim netdevsim1 eth1: set [1, 2] type 2 family 0 port 19999 - 0 [ 157.007341][ T8180] netdevsim netdevsim1 eth2: set [1, 2] type 2 family 0 port 19999 - 0 [ 157.117545][ T9335] netlink: 4 bytes leftover after parsing attributes in process `syz.1.948'. [ 157.149964][ T9327] bond7: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 157.187853][ T9327] bond7 (unregistering): Released all slaves [ 157.240469][ T9340] netlink: 4 bytes leftover after parsing attributes in process `syz.0.947'. [ 157.279288][ T8180] netdevsim netdevsim1 eth3: set [1, 2] type 2 family 0 port 19999 - 0 [ 157.341963][ T9335] netlink: 4 bytes leftover after parsing attributes in process `syz.1.948'. [ 157.368402][ T13] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 157.381647][ T13] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 157.411395][ T13] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 157.425227][ T5649] Bluetooth: hci4: command 0x0406 tx timeout [ 157.447672][ T13] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 157.462110][ T9344] af_packet: tpacket_rcv: packet too big, clamped from 4848 to 3952. macoff=96 [ 157.727274][ T9368] netlink: 8 bytes leftover after parsing attributes in process `syz.0.957'. [ 157.750496][ T9368] netlink: 'syz.0.957': attribute type 5 has an invalid length. [ 157.772389][ T9368] netlink: 20 bytes leftover after parsing attributes in process `syz.0.957'. [ 157.804713][ T9368] geneve4: entered promiscuous mode [ 157.817053][ T9368] geneve4: entered allmulticast mode [ 157.827112][ T8180] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 256 - 0 [ 157.840770][ T8180] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0 [ 157.855070][ T8180] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 256 - 0 [ 157.866272][ T8180] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 256 - 0 [ 157.990946][ T9379] netlink: 28 bytes leftover after parsing attributes in process `syz.2.963'. [ 158.206198][ T9396] netlink: 'syz.3.968': attribute type 12 has an invalid length. [ 158.215306][ T9396] netlink: 'syz.3.968': attribute type 29 has an invalid length. [ 158.224409][ T9396] netlink: 148 bytes leftover after parsing attributes in process `syz.3.968'. [ 158.235556][ T9396] netlink: 'syz.3.968': attribute type 3 has an invalid length. [ 158.259959][ T9396] netlink: 'syz.3.968': attribute type 2 has an invalid length. [ 158.295409][ T9396] netlink: 3 bytes leftover after parsing attributes in process `syz.3.968'. [ 158.483036][ T9404] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 159.680231][ T9462] validate_nla: 1 callbacks suppressed [ 159.680248][ T9462] netlink: 'syz.3.984': attribute type 4 has an invalid length. [ 159.763848][ T9468] netlink: 'syz.3.984': attribute type 4 has an invalid length. [ 159.930274][ T9477] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.938180][ T9477] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.552035][ T9504] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 160.578140][ T9507] __nla_validate_parse: 6 callbacks suppressed [ 160.578156][ T9507] netlink: 16 bytes leftover after parsing attributes in process `syz.4.998'. [ 160.585287][ T9506] netlink: 16 bytes leftover after parsing attributes in process `syz.4.998'. [ 160.718029][ T9509] pim6reg527: entered allmulticast mode [ 160.943740][ T9533] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1005'. [ 161.161108][ T9552] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1011'. [ 161.362583][ T9555] bond2: option lacp_active: mode dependency failed, not supported in mode active-backup(1) [ 161.378229][ T9555] bond2 (unregistering): Released all slaves [ 161.459321][ T9565] tunl0: entered promiscuous mode [ 161.467274][ T9565] netlink: 'syz.1.1016': attribute type 4 has an invalid length. [ 161.475583][ T9565] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1016'. [ 161.492627][ T9565] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1016'. [ 161.571073][ T9571] syz.3.1019: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 161.592227][ T9571] CPU: 0 UID: 0 PID: 9571 Comm: syz.3.1019 Not tainted syzkaller #0 PREEMPT(full) [ 161.592254][ T9571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 161.592272][ T9571] Call Trace: [ 161.592280][ T9571] [ 161.592292][ T9571] dump_stack_lvl+0xe8/0x150 [ 161.592321][ T9571] warn_alloc+0x249/0x340 [ 161.592351][ T9571] ? __pfx_stack_trace_save+0x10/0x10 [ 161.592384][ T9571] ? __pfx_warn_alloc+0x10/0x10 [ 161.592417][ T9571] ? __kasan_kmalloc+0x93/0xb0 [ 161.592442][ T9571] ? __kmalloc_cache_noprof+0x318/0x660 [ 161.592466][ T9571] ? xskq_create+0x56/0x170 [ 161.592489][ T9571] ? xsk_init_queue+0x8a/0xe0 [ 161.592511][ T9571] ? xsk_setsockopt+0x52a/0x960 [ 161.592533][ T9571] ? do_sock_setsockopt+0x17c/0x1b0 [ 161.592560][ T9571] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 161.592592][ T9571] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.592619][ T9571] __vmalloc_node_range_noprof+0x12c/0x1730 [ 161.592677][ T9571] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 161.592713][ T9571] ? __kasan_kmalloc+0x93/0xb0 [ 161.592742][ T9571] vmalloc_user_noprof+0xad/0xe0 [ 161.592767][ T9571] ? xskq_create+0xbf/0x170 [ 161.592793][ T9571] xskq_create+0xbf/0x170 [ 161.592820][ T9571] xsk_init_queue+0x8a/0xe0 [ 161.592849][ T9571] xsk_setsockopt+0x52a/0x960 [ 161.592874][ T9571] ? __fget_files+0x2a/0x420 [ 161.592900][ T9571] ? __pfx_xsk_setsockopt+0x10/0x10 [ 161.592926][ T9571] ? __pfx_aa_sk_perm+0x10/0x10 [ 161.592975][ T9571] ? aa_sock_opt_perm+0xff/0x1a0 [ 161.593010][ T9571] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 161.593037][ T9571] ? __pfx_xsk_setsockopt+0x10/0x10 [ 161.593065][ T9571] do_sock_setsockopt+0x17c/0x1b0 [ 161.593099][ T9571] __x64_sys_setsockopt+0x13d/0x1b0 [ 161.593129][ T9571] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.593151][ T9571] do_syscall_64+0x174/0x580 [ 161.593169][ T9571] ? trace_irq_disable+0x3b/0x140 [ 161.593198][ T9571] ? clear_bhb_loop+0x40/0x90 [ 161.593223][ T9571] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.593242][ T9571] RIP: 0033:0x7f3cb6b9ce59 [ 161.593265][ T9571] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 161.593281][ T9571] RSP: 002b:00007f3cb7ae7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 161.593302][ T9571] RAX: ffffffffffffffda RBX: 00007f3cb6e15fa0 RCX: 00007f3cb6b9ce59 [ 161.593316][ T9571] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006 [ 161.593328][ T9571] RBP: 00007f3cb6c32d6f R08: 0000000000000004 R09: 0000000000000000 [ 161.593340][ T9571] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 161.593353][ T9571] R13: 00007f3cb6e16038 R14: 00007f3cb6e15fa0 R15: 00007ffec7845488 [ 161.593387][ T9571] [ 161.875803][ T9571] Mem-Info: [ 161.908654][ T9571] active_anon:6053 inactive_anon:6 isolated_anon:0 [ 161.908654][ T9571] active_file:2441 inactive_file:40178 isolated_file:0 [ 161.908654][ T9571] unevictable:768 dirty:70 writeback:0 [ 161.908654][ T9571] slab_reclaimable:10555 slab_unreclaimable:103146 [ 161.908654][ T9571] mapped:29218 shmem:1290 pagetables:1236 [ 161.908654][ T9571] sec_pagetables:0 bounce:0 [ 161.908654][ T9571] kernel_misc_reclaimable:0 [ 161.908654][ T9571] free:1328020 free_pcp:9283 free_cma:0 [ 161.955779][ T9571] Node 0 active_anon:24212kB inactive_anon:24kB active_file:9764kB inactive_file:160512kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116872kB dirty:280kB writeback:0kB shmem:3624kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12736kB pagetables:4908kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 161.995156][ T9571] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 162.027894][ T9571] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 162.058650][ T9571] lowmem_reserve[]: 0 2493 2494 2494 2494 [ 162.064537][ T9571] Node 0 DMA32 free:1351832kB boost:0kB min:34188kB low:42732kB high:51276kB reserved_highatomic:0KB free_highatomic:0KB active_anon:24212kB inactive_anon:24kB active_file:9764kB inactive_file:160512kB unevictable:1536kB writepending:280kB zspages:0kB present:3129332kB managed:2553212kB mlocked:0kB bounce:0kB free_pcp:36916kB local_pcp:21324kB free_cma:0kB [ 162.102149][ T9571] lowmem_reserve[]: 0 0 0 0 0 [ 162.107156][ T9571] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:692kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 162.137231][ T9571] lowmem_reserve[]: 0 0 0 0 0 [ 162.142070][ T9571] Node 1 Normal free:3945188kB boost:0kB min:55704kB low:69628kB high:83552kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 162.212159][ T9585] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1021'. [ 162.274527][ T9571] lowmem_reserve[]: 0 0 0 0 0 [ 162.311383][ T9571] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 162.428360][ T9571] Node 0 DMA32: 2592*4kB (UME) 2149*8kB (UM) 721*16kB (UME) 50*32kB (ME) 1*64kB (U) 209*128kB (U) 154*256kB (U) 90*512kB (UME) 47*1024kB (UME) 35*2048kB (UM) 263*4096kB (UM) = 1350072kB [ 162.474608][ T9602] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1027'. [ 162.491739][ T9571] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 162.503780][ T9571] Node 1 Normal: 1*4kB (U) 6*8kB (UM) 7*16kB (UM) 8*32kB (UM) 5*64kB (UM) 4*128kB (UM) 4*256kB (UM) 5*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 961*4096kB (M) = 3945188kB [ 162.557396][ T9571] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 162.575251][ T9571] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 162.619508][ T9605] netlink: 'syz.2.1028': attribute type 29 has an invalid length. [ 162.619892][ T9571] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 162.640501][ T9606] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.1028'. [ 162.641372][ T9571] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 162.659644][ T9571] 43905 total pagecache pages [ 162.664552][ T9571] 0 pages in swap cache [ 162.668765][ T9571] Free swap = 124996kB [ 162.673315][ T9571] Total swap = 124996kB [ 162.677580][ T9571] 2097051 pages RAM [ 162.681618][ T9571] 0 pages HighMem/MovableOnly [ 162.686441][ T9571] 426960 pages reserved [ 162.690635][ T9571] 0 pages cma reserved [ 162.751121][ T9606] veth0_to_bond: default FDB implementation only supports local addresses [ 162.777318][ T9605] netlink: 'syz.2.1028': attribute type 29 has an invalid length. [ 162.824504][ T9613] sch_tbf: burst 7 is lower than device syzkaller0 mtu (1514) ! [ 163.039384][ T9610] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1029'. [ 163.474013][ T9635] team1: entered promiscuous mode [ 163.487633][ T9635] team1: entered allmulticast mode [ 164.229846][ T9675] ipt_REJECT: TCP_RESET invalid for non-tcp [ 164.270723][ T9679] IPv6: sit3: Disabled Multicast RS [ 164.457095][ T9688] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 164.477109][ T9688] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 164.659419][ T9688] bond2: entered promiscuous mode [ 164.672821][ T9706] netlink: 'syz.3.1058': attribute type 1 has an invalid length. [ 164.687088][ T9688] bond2: entered allmulticast mode [ 164.843981][ T9717] netlink: 'syz.4.1060': attribute type 1 has an invalid length. [ 165.020296][ T9732] netlink: 'syz.0.1066': attribute type 12 has an invalid length. [ 165.053329][ T9732] netlink: 'syz.0.1066': attribute type 12 has an invalid length. [ 165.145389][ T9736] bond1 (unregistering): Released all slaves [ 165.237864][ T9749] netlink: 'syz.3.1068': attribute type 11 has an invalid length. [ 165.339453][ T9756] netem: change failed [ 165.483992][ T9768] netlink: 'syz.0.1070': attribute type 1 has an invalid length. [ 165.484048][ T9769] netlink: 'syz.2.1073': attribute type 18 has an invalid length. [ 165.526749][ T9768] netlink: 'syz.0.1070': attribute type 2 has an invalid length. [ 165.677792][ T8176] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 165.708335][ T8176] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 165.738372][ T8176] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 165.762358][ T8176] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 166.029685][ T9794] x_tables: duplicate underflow at hook 1 [ 166.271746][ T9815] openvswitch: netlink: IPv4 tun info is not correct [ 166.280202][ T9816] tipc: Invalid UDP bearer configuration [ 166.280252][ T9816] tipc: Enabling of bearer rejected, failed to enable media [ 166.367991][ T9822] openvswitch: netlink: IPv4 tun info is not correct [ 166.999852][ T9862] netlink: 'syz.2.1099': attribute type 10 has an invalid length. [ 167.167866][ T9870] __nla_validate_parse: 19 callbacks suppressed [ 167.167884][ T9870] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1101'. [ 167.284042][ T9874] bond3: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 167.299274][ T9874] bond3 (unregistering): Released all slaves [ 167.329083][ T9870] : entered promiscuous mode [ 167.554461][ T9896] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1111'. [ 167.584323][ T9896] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1111'. [ 167.678195][ T9902] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1111'. [ 167.776423][ T9902] syzkaller1: entered promiscuous mode [ 167.798400][ T9902] syzkaller1: entered allmulticast mode [ 167.840486][ T9907] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1113'. [ 167.931915][ T9914] syzkaller0: entered promiscuous mode [ 167.941631][ T9914] syzkaller0: entered allmulticast mode [ 168.227965][ T9928] syzkaller0: entered promiscuous mode [ 168.247727][ T9928] syzkaller0: entered allmulticast mode [ 168.359467][ T9943] netlink: 'syz.2.1123': attribute type 1 has an invalid length. [ 168.373005][ T9943] netlink: 'syz.2.1123': attribute type 2 has an invalid length. [ 168.390711][ T9943] netlink: 'syz.2.1123': attribute type 1 has an invalid length. [ 168.407315][ T9943] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1123'. [ 168.511406][ T9952] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1125'. [ 168.683898][ T9958] nbd: must specify a device to reconfigure [ 168.988818][ T9984] veth1_macvtap: entered promiscuous mode [ 169.191823][ T9994] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1138'. [ 169.206650][ T9994] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1138'. [ 169.652039][T10033] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 169.708737][T10037] 8021q: adding VLAN 0 to HW filter on device team0 [ 169.736160][T10038] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1150'. [ 169.781522][T10037] 8021q: adding VLAN 0 to HW filter on device eth0 [ 169.814573][T10037] 8021q: adding VLAN 0 to HW filter on device eth1 [ 169.849372][T10037] 8021q: adding VLAN 0 to HW filter on device eth2 [ 169.873677][T10037] 8021q: adding VLAN 0 to HW filter on device eth3 [ 169.890094][T10037] 8021q: adding VLAN 0 to HW filter on device bond2 [ 169.900175][T10037] 8021q: adding VLAN 0 to HW filter on device bond3 [ 169.908879][T10037] 8021q: adding VLAN 0 to HW filter on device team1 [ 169.922093][T10037] 8021q: adding VLAN 0 to HW filter on device bond4 [ 169.951837][T10042] tipc: Enabling of bearer rejected, failed to enable media [ 169.962932][T10042] tipc: Enabling of bearer rejected, failed to enable media [ 169.972285][T10042] tipc: Enabling of bearer rejected, failed to enable media [ 169.998115][T10042] tipc: Enabling of bearer rejected, failed to enable media [ 170.010203][T10042] tipc: Enabling of bearer rejected, failed to enable media [ 170.020718][T10042] tipc: Enabling of bearer rejected, failed to enable media [ 170.030605][T10042] tipc: Enabling of bearer rejected, failed to enable media [ 170.049729][T10042] tipc: Enabling of bearer rejected, failed to enable media [ 170.061368][T10042] tipc: Enabling of bearer rejected, failed to enable media [ 170.094072][T10042] tipc: Enabling of bearer rejected, failed to enable media [ 170.107868][T10052] syzkaller1: entered promiscuous mode [ 170.115575][T10052] syzkaller1: entered allmulticast mode [ 170.126260][T10042] tipc: Enabling of bearer rejected, failed to enable media [ 170.149184][T10042] tipc: Enabling of bearer rejected, failed to enable media [ 170.168339][T10042] tipc: Enabling of bearer rejected, failed to enable media [ 170.199322][T10042] tipc: Enabling of bearer rejected, failed to enable media [ 170.264959][T10042] tipc: Enabling of bearer rejected, failed to enable media [ 170.280111][T10042] tipc: Enabling of bearer rejected, failed to enable media [ 170.310167][T10042] tipc: Enabling of bearer rejected, failed to enable media [ 170.319931][T10042] tipc: Enabling of bearer rejected, failed to enable media [ 170.342102][T10042] tipc: Enabling of bearer rejected, failed to enable media [ 170.372049][T10042] tipc: Enabling of bearer rejected, failed to enable media [ 170.393924][T10042] tipc: Enabling of bearer rejected, failed to enable media [ 170.405035][T10042] tipc: Enabling of bearer rejected, failed to enable media [ 170.424709][T10042] tipc: Enabling of bearer rejected, failed to enable media [ 170.449521][T10042] tipc: Enabling of bearer rejected, failed to enable media [ 170.494859][T10042] tipc: Enabling of bearer rejected, failed to enable media [ 170.514144][T10042] tipc: Enabling of bearer rejected, failed to enable media [ 170.535873][T10042] tipc: Enabling of bearer rejected, failed to enable media [ 170.569291][T10042] tipc: Enabling of bearer rejected, failed to enable media [ 170.585147][T10042] tipc: Enabling of bearer rejected, failed to enable media [ 170.595735][T10042] tipc: Enabling of bearer rejected, failed to enable media [ 170.612507][T10042] tipc: Enabling of bearer rejected, failed to enable media [ 170.628249][T10042] tipc: Enabling of bearer rejected, failed to enable media [ 170.654558][T10042] tipc: Enabling of bearer rejected, failed to enable media [ 170.890658][T10088] validate_nla: 3 callbacks suppressed [ 170.890675][T10088] netlink: 'syz.2.1164': attribute type 1 has an invalid length. [ 170.937200][T10088] netlink: 'syz.2.1164': attribute type 2 has an invalid length. [ 170.955368][T10088] netlink: 'syz.2.1164': attribute type 1 has an invalid length. [ 170.973414][T10088] netlink: 'syz.2.1164': attribute type 3 has an invalid length. [ 171.298494][T10106] tipc: Enabling of bearer rejected, failed to enable media [ 171.908811][ T29] audit: type=1804 audit(1781495527.560:9): pid=10134 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1180" name="/newroot/237/cgroup.controllers" dev="tmpfs" ino=1219 res=1 errno=0 [ 171.931786][ T29] audit: type=1800 audit(1781495527.560:10): pid=10134 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1180" name="cgroup.controllers" dev="tmpfs" ino=1219 res=0 errno=0 [ 172.387663][ T25] block nbd0: Possible stuck request ffff888027555240: control (read@1024,1024B). Runtime 60 seconds [ 172.399142][ T25] block nbd0: Possible stuck request ffff888027555400: control (read@2048,1024B). Runtime 60 seconds [ 172.411396][ T25] block nbd0: Possible stuck request ffff8880275555c0: control (read@3072,1024B). Runtime 60 seconds [ 172.423601][ T25] block nbd0: Possible stuck request ffff888027555080: control (read@0,1024B). Runtime 60 seconds [ 173.412408][T10141] bridge: RTM_NEWNEIGH with invalid ether address [ 173.662075][T10162] __nla_validate_parse: 4 callbacks suppressed [ 173.662093][T10162] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1188'. [ 173.686814][T10157] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1186'. [ 173.706933][T10166] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1189'. [ 173.733850][T10170] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1190'. [ 173.782022][T10171] pimreg: entered allmulticast mode [ 173.815818][T10159] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 173.823159][T10159] IPv6: NLM_F_CREATE should be set when creating new route [ 173.830429][T10159] IPv6: NLM_F_CREATE should be set when creating new route [ 173.881564][T10159] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 174.105537][T10181] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1192'. [ 174.116593][T10179] netlink: 576 bytes leftover after parsing attributes in process `syz.3.1193'. [ 174.125371][T10185] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1194'. [ 174.270010][T10179] bond3: option fail_over_mac: invalid value (16) [ 174.311874][T10179] bond3 (unregistering): Released all slaves [ 174.527656][T10204] netlink: 'syz.1.1199': attribute type 1 has an invalid length. [ 174.550653][T10206] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1200'. [ 174.648841][T10210] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1202'. [ 174.746845][T10216] vxcan1: tx drop: invalid da for name 0x0000000000000002 [ 174.761058][T10213] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1203'. [ 174.995182][T10236] netlink: 'syz.2.1210': attribute type 2 has an invalid length. [ 175.150859][T10248] netlink: 'syz.0.1211': attribute type 1 has an invalid length. [ 175.249683][T10253] ieee802154 phy1 wpan1: encryption failed: -22 [ 175.717564][T10285] bond0: option miimon: invalid value (18446744071829782528) [ 175.733081][T10285] bond0: option miimon: allowed values 0 - 2147483647 [ 175.776674][T10288] netlink: 'syz.2.1222': attribute type 2 has an invalid length. [ 176.379199][T10316] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 176.387326][T10316] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 176.675687][T10333] netlink: 'syz.1.1235': attribute type 4 has an invalid length. [ 177.021912][T10360] bond0: entered promiscuous mode [ 177.039573][T10360] bond_slave_0: entered promiscuous mode [ 177.061521][T10360] bond_slave_1: entered promiscuous mode [ 177.347036][T10388] netlink: 'syz.2.1249': attribute type 1 has an invalid length. [ 177.356143][T10388] netlink: 'syz.2.1249': attribute type 11 has an invalid length. [ 177.382710][T10390] netlink: 'syz.1.1248': attribute type 3 has an invalid length. [ 177.517444][T10394] syzkaller0: entered promiscuous mode [ 177.523680][T10394] syzkaller0: entered allmulticast mode [ 177.536524][T10394] netlink: 'syz.2.1251': attribute type 1 has an invalid length. [ 177.733579][ T8180] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 177.745383][ T8180] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 177.765946][ T5753] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 177.821314][T10407] netlink: 'syz.0.1253': attribute type 1 has an invalid length. [ 177.831140][T10407] netlink: 'syz.0.1253': attribute type 4 has an invalid length. [ 177.890139][ T29] audit: type=1804 audit(1781495533.540:11): pid=10410 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1254" name="/newroot/247/cgroup.controllers" dev="tmpfs" ino=1289 res=1 errno=0 [ 177.936151][ T29] audit: type=1800 audit(1781495533.540:12): pid=10410 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1254" name="cgroup.controllers" dev="tmpfs" ino=1289 res=0 errno=0 [ 177.959513][ T5753] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 178.003662][ T29] audit: type=1804 audit(1781495533.570:13): pid=10410 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.1254" name="/newroot/247/cgroup.controllers" dev="tmpfs" ino=1289 res=1 errno=0 [ 178.180665][T10421] bond3: down delay (25) is not a multiple of miimon (100), value rounded to 0 ms [ 178.543268][ T5365] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 179.995262][T10360] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 180.428422][T10446] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 180.467876][T10451] __nla_validate_parse: 46 callbacks suppressed [ 180.467893][T10451] netlink: 666 bytes leftover after parsing attributes in process `syz.4.1265'. [ 180.577181][T10453] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1266'. [ 180.691192][T10460] netlink: 'syz.1.1269': attribute type 21 has an invalid length. [ 180.718049][T10462] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1270'. [ 180.732222][T10460] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1269'. [ 180.734908][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 180.742506][T10462] ipvlan1: entered allmulticast mode [ 180.750959][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 180.755470][T10462] veth0_vlan: entered allmulticast mode [ 180.769084][T10460] netlink: 'syz.1.1269': attribute type 5 has an invalid length. [ 180.779171][T10460] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1269'. [ 180.795480][T10464] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 180.798620][T10465] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 180.980433][T10470] netlink: 'syz.1.1273': attribute type 8 has an invalid length. [ 181.265868][T10492] sock: sock_timestamping_bind_phc: sock not bind to device [ 181.297965][T10492] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1280'. [ 181.420675][T10501] tunl0: entered promiscuous mode [ 181.455336][T10501] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1283'. [ 181.611339][T10509] netlink: 232 bytes leftover after parsing attributes in process `syz.4.1284'. [ 181.788526][T10529] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1282'. [ 181.862409][T10534] validate_nla: 1 callbacks suppressed [ 181.862427][T10534] netlink: 'syz.1.1292': attribute type 39 has an invalid length. [ 181.903003][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 182.079942][T10544] IPVS: length: 74 != 24 [ 182.093380][T10544] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1293'. [ 182.285810][T10550] vlan3: entered allmulticast mode [ 182.291171][T10550] bond0: entered allmulticast mode [ 182.304245][T10550] bond_slave_1: entered allmulticast mode [ 182.311381][T10550] team0: entered allmulticast mode [ 182.316853][T10550] team_slave_0: entered allmulticast mode [ 182.322791][T10550] team_slave_1: entered allmulticast mode [ 182.836620][T10578] netlink: 'syz.3.1299': attribute type 1 has an invalid length. [ 184.216204][T10578] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 184.953420][T10631] openvswitch: netlink: IPv4 tun info is not correct [ 185.272344][T10647] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 185.690886][T10670] netlink: 'syz.4.1328': attribute type 1 has an invalid length. [ 185.714034][T10670] __nla_validate_parse: 5 callbacks suppressed [ 185.714059][T10670] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1328'. [ 186.074591][T10690] netlink: 'syz.3.1331': attribute type 1 has an invalid length. [ 186.141087][T10697] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.1333'. [ 186.152226][T10690] 8021q: adding VLAN 0 to HW filter on device bond4 [ 186.603537][T10728] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1337'. [ 187.057294][T10748] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.1342'. [ 187.057403][T10747] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.1342'. [ 187.158668][T10753] x_tables: ip_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 187.191312][T10753] netlink: 'syz.1.1343': attribute type 267 has an invalid length. [ 187.216013][T10757] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1345'. [ 187.393090][T10771] netlink: 11 bytes leftover after parsing attributes in process `syz.4.1350'. [ 187.449050][T10772] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1350'. [ 187.481350][T10772] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1350'. [ 187.526161][T10778] netlink: 'syz.2.1352': attribute type 1 has an invalid length. [ 187.580401][T10774] veth5: entered allmulticast mode [ 187.640395][T10778] 8021q: adding VLAN 0 to HW filter on device bond7 [ 187.649811][T10774] netlink: 'syz.3.1351': attribute type 5 has an invalid length. [ 187.780116][T10793] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1355'. [ 188.252143][T10816] netlink: 'syz.2.1360': attribute type 12 has an invalid length. [ 188.417228][T10829] netlink: 'syz.4.1362': attribute type 17 has an invalid length. [ 188.523725][T10838] tipc: Enabling of bearer rejected, failed to enable media [ 188.731562][T10846] veth0_macvtap: entered allmulticast mode [ 188.753662][T10846] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 189.065073][T10860] syzkaller0: entered promiscuous mode [ 189.071733][T10860] syzkaller0: entered allmulticast mode [ 189.370987][T10879] netlink: 'syz.1.1382': attribute type 10 has an invalid length. [ 189.440723][T10880] openvswitch: netlink: Unknown nsh attribute 0 [ 189.871808][T10910] xt_TPROXY: Can be used only with -p tcp or -p udp [ 190.302960][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 191.503281][T11016] __nla_validate_parse: 9 callbacks suppressed [ 191.503299][T11016] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1406'. [ 191.570327][T11016] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1406'. [ 192.330493][T11057] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1418'. [ 192.658005][T11068] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 192.895255][T11097] netlink: 'syz.2.1424': attribute type 21 has an invalid length. [ 192.931465][T11097] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1424'. [ 192.972390][T11097] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1424'. [ 192.999077][T11097] netlink: 'syz.2.1424': attribute type 7 has an invalid length. [ 193.017206][T11097] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1424'. [ 194.145461][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.635788][T11072] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 195.651033][T11101] netlink: 'syz.4.1429': attribute type 1 has an invalid length. [ 195.659047][T11101] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1429'. [ 195.674391][T11101] workqueue: Failed to create a rescuer kthread for wq "phy2-mac-cmds": -EINTR [ 195.898956][T11140] bond1 (unregistering): Released all slaves [ 196.018286][T11150] netlink: 'syz.3.1436': attribute type 29 has an invalid length. [ 196.120891][T11173] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1439'. [ 196.292198][T11181] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1441'. [ 196.353663][T11185] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 196.455975][T11193] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.1444'. [ 196.498820][T11196] xt_connbytes: Forcing CT accounting to be enabled [ 196.627876][T11204] openvswitch: netlink: Tunnel attr 78 out of range max 16 [ 196.672581][T11154] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 196.684165][T11210] __nla_validate_parse: 1 callbacks suppressed [ 196.684181][T11210] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.1449'. [ 196.924319][T11218] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1454'. [ 196.938687][T11231] netlink: 'syz.3.1456': attribute type 2 has an invalid length. [ 197.115757][ T5753] IPVS: starting estimator thread 0... [ 197.213149][T11243] IPVS: using max 36 ests per chain, 86400 per kthread [ 200.103360][ T4999] udevd[4999]: worker [5639] /devices/virtual/block/nbd0 is taking a long time [ 201.346585][ T5650] Bluetooth: hci0: command 0x0406 tx timeout [ 201.346888][ T5636] Bluetooth: hci1: command 0x0406 tx timeout [ 201.359672][ T50] Bluetooth: hci3: command 0x0406 tx timeout [ 201.361376][ T5643] Bluetooth: hci2: command 0x0406 tx timeout [ 202.466854][ T25] block nbd0: Possible stuck request ffff888027555240: control (read@1024,1024B). Runtime 90 seconds [ 202.477870][ T25] block nbd0: Possible stuck request ffff888027555400: control (read@2048,1024B). Runtime 90 seconds [ 202.489921][ T25] block nbd0: Possible stuck request ffff8880275555c0: control (read@3072,1024B). Runtime 90 seconds [ 202.500981][ T25] block nbd0: Possible stuck request ffff888027555080: control (read@0,1024B). Runtime 90 seconds [ 207.583035][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 212.411983][ T5632] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 212.427681][ T5632] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 212.441737][ T5632] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 212.452104][ T5632] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 212.460502][ T5632] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 212.568699][ T5632] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 212.581475][ T5632] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 212.589511][ T5632] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 212.597810][ T5632] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 212.605947][ T5632] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 212.648527][ T5635] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 212.661927][ T5635] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 212.670348][ T5635] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 212.678438][ T5635] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 212.689952][ T5635] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 212.786584][ T5632] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 212.800162][ T5632] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 212.808223][ T5632] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 212.816625][ T5632] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 212.825343][ T5632] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 212.918754][ T5635] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 212.934541][ T5635] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 212.945123][ T5635] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 212.960007][ T5635] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 212.969667][ T5635] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 214.295841][T11255] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.304820][T11255] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.312037][T11255] bridge_slave_0: entered allmulticast mode [ 214.319437][T11255] bridge_slave_0: entered promiscuous mode [ 214.331774][T11255] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.339056][T11255] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.346605][T11255] bridge_slave_1: entered allmulticast mode [ 214.354334][T11255] bridge_slave_1: entered promiscuous mode [ 214.454741][T11251] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.462407][T11251] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.470457][T11251] bridge_slave_0: entered allmulticast mode [ 214.479868][T11251] bridge_slave_0: entered promiscuous mode [ 214.498565][T11255] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 214.512004][T11255] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 214.534930][T11251] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.542099][T11251] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.549389][ T5635] Bluetooth: hci5: command tx timeout [ 214.549894][T11251] bridge_slave_1: entered allmulticast mode [ 214.565976][T11251] bridge_slave_1: entered promiscuous mode [ 214.667737][T11251] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 214.690843][T11255] team0: Port device team_slave_0 added [ 214.703488][ T5635] Bluetooth: hci6: command tx timeout [ 214.704526][T11251] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 214.730901][T11257] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.738339][T11257] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.745792][T11257] bridge_slave_0: entered allmulticast mode [ 214.752879][T11257] bridge_slave_0: entered promiscuous mode [ 214.761449][T11255] team0: Port device team_slave_1 added [ 214.783564][ T5635] Bluetooth: hci7: command tx timeout [ 214.793584][T11257] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.800777][T11257] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.808261][T11257] bridge_slave_1: entered allmulticast mode [ 214.815522][T11257] bridge_slave_1: entered promiscuous mode [ 214.850165][T11251] team0: Port device team_slave_0 added [ 214.863197][ T5635] Bluetooth: hci8: command tx timeout [ 214.899966][T11251] team0: Port device team_slave_1 added [ 214.915681][T11255] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 214.922714][T11255] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 214.951125][T11255] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 214.964884][T11263] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.972167][T11263] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.980474][T11263] bridge_slave_0: entered allmulticast mode [ 214.987623][T11263] bridge_slave_0: entered promiscuous mode [ 215.011426][T11257] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 215.023414][ T5635] Bluetooth: hci9: command tx timeout [ 215.033693][T11255] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 215.040668][T11255] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 215.066923][T11255] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 215.078667][T11263] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.086172][T11263] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.093664][T11263] bridge_slave_1: entered allmulticast mode [ 215.100543][T11263] bridge_slave_1: entered promiscuous mode [ 215.123422][T11257] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 215.153293][T11251] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 215.160303][T11251] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 215.187540][T11251] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 215.237830][T11251] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 215.245175][T11251] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 215.272493][T11251] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 215.294985][T11257] team0: Port device team_slave_0 added [ 215.304851][T11263] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 215.317595][T11263] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 215.358132][T11255] hsr_slave_0: entered promiscuous mode [ 215.364536][T11255] hsr_slave_1: entered promiscuous mode [ 215.372543][T11257] team0: Port device team_slave_1 added [ 215.388312][T11269] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.395660][T11269] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.402908][T11269] bridge_slave_0: entered allmulticast mode [ 215.409999][T11269] bridge_slave_0: entered promiscuous mode [ 215.439877][T11269] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.447359][T11269] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.454738][T11269] bridge_slave_1: entered allmulticast mode [ 215.461821][T11269] bridge_slave_1: entered promiscuous mode [ 215.499095][T11263] team0: Port device team_slave_0 added [ 215.527428][T11257] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 215.534891][T11257] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 215.561305][T11257] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 215.575365][T11263] team0: Port device team_slave_1 added [ 215.597462][T11251] hsr_slave_0: entered promiscuous mode [ 215.603777][T11251] hsr_slave_1: entered promiscuous mode [ 215.609770][T11251] debugfs: 'hsr0' already exists in 'hsr' [ 215.617001][T11251] Cannot create hsr debugfs directory [ 215.631390][T11257] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 215.638676][T11257] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 215.665086][T11257] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 215.687372][T11269] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 215.700631][T11269] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 215.758653][T11263] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 215.766074][T11263] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 215.793307][T11263] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 215.831814][T11263] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 215.838984][T11263] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 215.865351][T11263] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 215.887791][T11269] team0: Port device team_slave_0 added [ 215.926353][T11269] team0: Port device team_slave_1 added [ 215.976142][T11257] hsr_slave_0: entered promiscuous mode [ 215.982381][T11257] hsr_slave_1: entered promiscuous mode [ 215.989737][T11257] debugfs: 'hsr0' already exists in 'hsr' [ 215.995628][T11257] Cannot create hsr debugfs directory [ 216.057632][T11269] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 216.065235][T11269] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 216.091502][T11269] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 216.137100][T11269] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 216.144172][T11269] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 216.170377][T11269] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 216.187034][T11263] hsr_slave_0: entered promiscuous mode [ 216.194119][T11263] hsr_slave_1: entered promiscuous mode [ 216.200162][T11263] debugfs: 'hsr0' already exists in 'hsr' [ 216.206588][T11263] Cannot create hsr debugfs directory [ 216.410495][T11269] hsr_slave_0: entered promiscuous mode [ 216.417783][T11269] hsr_slave_1: entered promiscuous mode [ 216.424533][T11269] debugfs: 'hsr0' already exists in 'hsr' [ 216.430265][T11269] Cannot create hsr debugfs directory [ 216.622980][ T5635] Bluetooth: hci5: command tx timeout [ 216.783061][ T5635] Bluetooth: hci6: command tx timeout [ 216.863874][ T5635] Bluetooth: hci7: command tx timeout [ 216.942973][ T5635] Bluetooth: hci8: command tx timeout [ 217.104283][ T5635] Bluetooth: hci9: command tx timeout [ 218.704320][ T5635] Bluetooth: hci5: command tx timeout [ 218.863056][ T5635] Bluetooth: hci6: command tx timeout [ 218.953113][ T5635] Bluetooth: hci7: command tx timeout [ 219.023429][ T5635] Bluetooth: hci8: command tx timeout [ 219.183230][ T5635] Bluetooth: hci9: command tx timeout [ 220.783892][ T5635] Bluetooth: hci5: command tx timeout [ 220.942957][ T5635] Bluetooth: hci6: command tx timeout [ 221.023809][ T5635] Bluetooth: hci7: command tx timeout [ 221.103076][ T5635] Bluetooth: hci8: command tx timeout [ 221.263448][ T5635] Bluetooth: hci9: command tx timeout [ 232.553732][ T25] block nbd0: Possible stuck request ffff888027555240: control (read@1024,1024B). Runtime 120 seconds [ 232.564938][ T25] block nbd0: Possible stuck request ffff888027555400: control (read@2048,1024B). Runtime 120 seconds [ 232.576089][ T25] block nbd0: Possible stuck request ffff8880275555c0: control (read@3072,1024B). Runtime 120 seconds [ 232.588115][ T25] block nbd0: Possible stuck request ffff888027555080: control (read@0,1024B). Runtime 120 seconds [ 241.502979][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 255.584483][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 262.624270][ T25] block nbd0: Possible stuck request ffff888027555240: control (read@1024,1024B). Runtime 150 seconds [ 262.635659][ T25] block nbd0: Possible stuck request ffff888027555400: control (read@2048,1024B). Runtime 150 seconds [ 262.646845][ T25] block nbd0: Possible stuck request ffff8880275555c0: control (read@3072,1024B). Runtime 150 seconds [ 262.657894][ T25] block nbd0: Possible stuck request ffff888027555080: control (read@0,1024B). Runtime 150 seconds [ 272.767239][ T5632] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 272.780885][ T5632] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 272.794450][ T5632] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 272.808284][ T5632] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 272.817305][ T5632] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 272.881250][ T5635] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 272.900208][ T5635] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 272.910859][ T5643] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 272.926964][ T5643] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 272.932316][ T5650] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 272.939748][ T5643] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 272.945736][ T5650] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 272.962082][ T5635] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 272.967197][ T5650] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 272.970443][ T5643] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 272.980057][ T5650] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 272.994280][ T5643] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 272.994904][ T5650] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 273.011086][ T5635] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 273.012003][ T5650] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 273.230141][ T5650] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 273.246436][ T5650] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 273.254591][ T5650] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 273.264498][ T5650] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 273.272317][ T5650] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 274.664661][T11352] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.672705][T11352] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.680612][T11352] bridge_slave_0: entered allmulticast mode [ 274.688058][T11352] bridge_slave_0: entered promiscuous mode [ 274.757211][T11352] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.764526][T11352] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.771797][T11352] bridge_slave_1: entered allmulticast mode [ 274.780545][T11352] bridge_slave_1: entered promiscuous mode [ 274.865998][ T5650] Bluetooth: hci10: command tx timeout [ 274.907650][T11350] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.914931][T11350] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.922296][T11350] bridge_slave_0: entered allmulticast mode [ 274.929796][T11350] bridge_slave_0: entered promiscuous mode [ 274.950998][T11352] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 274.970222][T11350] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.977496][T11350] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.985361][T11350] bridge_slave_1: entered allmulticast mode [ 274.992382][T11350] bridge_slave_1: entered promiscuous mode [ 275.029716][T11352] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 275.085868][T11347] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.093225][T11347] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.100468][T11347] bridge_slave_0: entered allmulticast mode [ 275.103123][ T4950] Bluetooth: hci13: command tx timeout [ 275.107548][ T5649] Bluetooth: hci11: command tx timeout [ 275.114169][ T5650] Bluetooth: hci12: command tx timeout [ 275.126714][T11347] bridge_slave_0: entered promiscuous mode [ 275.136880][T11350] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 275.151231][T11349] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.159024][T11349] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.166364][T11349] bridge_slave_0: entered allmulticast mode [ 275.173928][T11349] bridge_slave_0: entered promiscuous mode [ 275.191033][T11347] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.198362][T11347] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.205947][T11347] bridge_slave_1: entered allmulticast mode [ 275.213475][T11347] bridge_slave_1: entered promiscuous mode [ 275.222472][T11350] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 275.246656][T11349] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.253935][T11349] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.261259][T11349] bridge_slave_1: entered allmulticast mode [ 275.269207][T11349] bridge_slave_1: entered promiscuous mode [ 275.287780][T11352] team0: Port device team_slave_0 added [ 275.327637][T11352] team0: Port device team_slave_1 added [ 275.343808][ T5650] Bluetooth: hci14: command tx timeout [ 275.357763][T11350] team0: Port device team_slave_0 added [ 275.374794][T11349] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 275.397899][T11347] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 275.409044][T11350] team0: Port device team_slave_1 added [ 275.439415][T11349] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 275.449509][T11352] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 275.458235][T11352] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 275.484648][T11352] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 275.498275][T11347] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 275.519020][T11364] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.526554][T11364] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.534130][T11364] bridge_slave_0: entered allmulticast mode [ 275.541203][T11364] bridge_slave_0: entered promiscuous mode [ 275.559025][T11352] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 275.566265][T11352] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 275.594883][T11352] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 275.614770][T11350] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 275.621713][T11350] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 275.648756][T11350] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 275.661179][T11350] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 275.668478][T11350] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 275.694970][T11350] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 275.708579][T11364] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.715852][T11364] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.723470][T11364] bridge_slave_1: entered allmulticast mode [ 275.730455][T11364] bridge_slave_1: entered promiscuous mode [ 275.756574][T11349] team0: Port device team_slave_0 added [ 275.797297][T11364] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 275.809452][T11349] team0: Port device team_slave_1 added [ 275.818769][T11347] team0: Port device team_slave_0 added [ 275.827354][T11347] team0: Port device team_slave_1 added [ 275.836273][T11364] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 275.908788][T11349] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 275.916068][T11349] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 275.943019][T11349] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 275.991181][T11349] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 275.998470][T11349] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 276.025400][T11349] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 276.037719][T11347] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 276.044847][T11347] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 276.071451][T11347] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 276.087732][T11352] hsr_slave_0: entered promiscuous mode [ 276.094266][T11352] hsr_slave_1: entered promiscuous mode [ 276.100315][T11352] debugfs: 'hsr0' already exists in 'hsr' [ 276.106873][T11352] Cannot create hsr debugfs directory [ 276.114623][T11364] team0: Port device team_slave_0 added [ 276.125729][T11350] hsr_slave_0: entered promiscuous mode [ 276.132014][T11350] hsr_slave_1: entered promiscuous mode [ 276.138407][T11350] debugfs: 'hsr0' already exists in 'hsr' [ 276.144713][T11350] Cannot create hsr debugfs directory [ 276.157696][T11347] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 276.165151][T11347] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 276.191482][T11347] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 276.211340][T11364] team0: Port device team_slave_1 added [ 276.316496][T11364] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 276.323795][T11364] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 276.349743][T11364] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 276.372135][T11349] hsr_slave_0: entered promiscuous mode [ 276.378561][T11349] hsr_slave_1: entered promiscuous mode [ 276.385514][T11349] debugfs: 'hsr0' already exists in 'hsr' [ 276.391250][T11349] Cannot create hsr debugfs directory [ 276.411739][T11364] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 276.419486][T11364] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 276.446202][T11364] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 276.479560][T11347] hsr_slave_0: entered promiscuous mode [ 276.485984][T11347] hsr_slave_1: entered promiscuous mode [ 276.492083][T11347] debugfs: 'hsr0' already exists in 'hsr' [ 276.497991][T11347] Cannot create hsr debugfs directory [ 276.677780][T11364] hsr_slave_0: entered promiscuous mode [ 276.684602][T11364] hsr_slave_1: entered promiscuous mode [ 276.690755][T11364] debugfs: 'hsr0' already exists in 'hsr' [ 276.696718][T11364] Cannot create hsr debugfs directory [ 276.943468][ T5650] Bluetooth: hci10: command tx timeout [ 277.183369][ T5650] Bluetooth: hci12: command tx timeout [ 277.183784][ T4950] Bluetooth: hci13: command tx timeout [ 277.189036][ T5649] Bluetooth: hci11: command tx timeout [ 277.423194][ T5650] Bluetooth: hci14: command tx timeout [ 279.023249][ T5650] Bluetooth: hci10: command tx timeout [ 279.263379][ T5650] Bluetooth: hci13: command tx timeout [ 279.263808][ T5649] Bluetooth: hci12: command tx timeout [ 279.268921][ T4950] Bluetooth: hci11: command tx timeout [ 279.503181][ T5649] Bluetooth: hci14: command tx timeout [ 281.104687][ T5649] Bluetooth: hci10: command tx timeout [ 281.343280][ T4950] Bluetooth: hci12: command tx timeout [ 281.344291][ T5649] Bluetooth: hci13: command tx timeout [ 281.349020][ T5650] Bluetooth: hci11: command tx timeout [ 281.583046][ T5650] Bluetooth: hci14: command tx timeout [ 288.384559][ T5650] Bluetooth: hci4: command 0x0406 tx timeout [ 292.704393][ T25] block nbd0: Possible stuck request ffff888027555240: control (read@1024,1024B). Runtime 180 seconds [ 292.715646][ T25] block nbd0: Possible stuck request ffff888027555400: control (read@2048,1024B). Runtime 180 seconds [ 292.726692][ T25] block nbd0: Possible stuck request ffff8880275555c0: control (read@3072,1024B). Runtime 180 seconds [ 292.737945][ T25] block nbd0: Possible stuck request ffff888027555080: control (read@0,1024B). Runtime 180 seconds [ 294.409094][ T4999] udevd[4999]: worker [5639] /devices/virtual/block/nbd0 timeout; kill it [ 294.418889][ T4999] udevd[4999]: seq 11480 '/devices/virtual/block/nbd0' killed [ 311.903020][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 317.025342][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.785888][ T25] block nbd0: Possible stuck request ffff888027555240: control (read@1024,1024B). Runtime 210 seconds [ 322.797020][ T25] block nbd0: Possible stuck request ffff888027555400: control (read@2048,1024B). Runtime 210 seconds [ 322.809121][ T25] block nbd0: Possible stuck request ffff8880275555c0: control (read@3072,1024B). Runtime 210 seconds [ 322.820164][ T25] block nbd0: Possible stuck request ffff888027555080: control (read@0,1024B). Runtime 210 seconds [ 333.005647][ T5650] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 333.017384][ T5650] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 333.027257][ T5650] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 333.040257][ T5650] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 333.048802][ T5650] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 333.118091][ T5650] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 333.131389][ T5650] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 333.146233][ T5632] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 333.160432][ T5632] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 333.170520][ T4950] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 333.180453][ T4950] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 333.189007][ T5632] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 333.200260][ T4950] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 333.222629][ T5649] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 333.235053][ T5649] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 333.357506][ T5649] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 333.379398][ T5649] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 333.390744][ T5649] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 333.400471][ T5632] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 333.414896][ T5632] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 333.424584][ T5649] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 333.434506][ T5649] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 333.444636][ T5649] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 333.455484][ T5632] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 333.477700][ T5649] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 334.646075][T11442] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.653802][T11442] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.661184][T11442] bridge_slave_0: entered allmulticast mode [ 334.669186][T11442] bridge_slave_0: entered promiscuous mode [ 334.695253][T11442] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.702499][T11442] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.711599][T11442] bridge_slave_1: entered allmulticast mode [ 334.720211][T11442] bridge_slave_1: entered promiscuous mode [ 334.839513][T11442] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 334.890920][T11442] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 335.015266][T11442] team0: Port device team_slave_0 added [ 335.076554][T11442] team0: Port device team_slave_1 added [ 335.103093][ T4950] Bluetooth: hci15: command tx timeout [ 335.146173][T11446] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.153549][T11446] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.160925][T11446] bridge_slave_0: entered allmulticast mode [ 335.168355][T11446] bridge_slave_0: entered promiscuous mode [ 335.219088][T11446] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.226729][T11446] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.234421][T11446] bridge_slave_1: entered allmulticast mode [ 335.241422][T11446] bridge_slave_1: entered promiscuous mode [ 335.259084][T11445] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.263187][ T4950] Bluetooth: hci17: command tx timeout [ 335.267188][ T5649] Bluetooth: hci16: command tx timeout [ 335.276328][T11445] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.286674][T11445] bridge_slave_0: entered allmulticast mode [ 335.294930][T11445] bridge_slave_0: entered promiscuous mode [ 335.302946][T11442] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 335.309910][T11442] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 335.336328][T11442] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 335.375470][T11445] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.382696][T11445] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.390164][T11445] bridge_slave_1: entered allmulticast mode [ 335.398297][T11445] bridge_slave_1: entered promiscuous mode [ 335.408415][T11442] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 335.415572][T11442] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 335.443143][T11442] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 335.498959][T11446] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 335.508238][ T5649] Bluetooth: hci18: command tx timeout [ 335.524722][T11454] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.531897][T11454] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.539546][T11454] bridge_slave_0: entered allmulticast mode [ 335.547427][T11454] bridge_slave_0: entered promiscuous mode [ 335.567731][T11446] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 335.585452][ T5649] Bluetooth: hci19: command tx timeout [ 335.589916][T11457] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.598821][T11457] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.607553][T11457] bridge_slave_0: entered allmulticast mode [ 335.614859][T11457] bridge_slave_0: entered promiscuous mode [ 335.622324][T11454] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.629938][T11454] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.637463][T11454] bridge_slave_1: entered allmulticast mode [ 335.644743][T11454] bridge_slave_1: entered promiscuous mode [ 335.655009][T11445] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 335.668118][T11445] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 335.688361][T11457] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.695799][T11457] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.703935][T11457] bridge_slave_1: entered allmulticast mode [ 335.710975][T11457] bridge_slave_1: entered promiscuous mode [ 335.810893][T11446] team0: Port device team_slave_0 added [ 335.819846][T11457] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 335.832464][T11454] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 335.844467][T11445] team0: Port device team_slave_0 added [ 335.855718][T11442] hsr_slave_0: entered promiscuous mode [ 335.862097][T11442] hsr_slave_1: entered promiscuous mode [ 335.868692][T11442] debugfs: 'hsr0' already exists in 'hsr' [ 335.874469][T11442] Cannot create hsr debugfs directory [ 335.881803][T11446] team0: Port device team_slave_1 added [ 335.901389][T11457] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 335.913880][T11454] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 335.924913][T11445] team0: Port device team_slave_1 added [ 335.999999][T11446] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 336.007214][T11446] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 336.034731][T11446] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 336.048745][T11457] team0: Port device team_slave_0 added [ 336.066127][T11454] team0: Port device team_slave_0 added [ 336.081283][T11445] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 336.088744][T11445] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 336.115893][T11445] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 336.127744][T11446] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 336.135064][T11446] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 336.162077][T11446] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 336.176779][T11457] team0: Port device team_slave_1 added [ 336.184632][T11454] team0: Port device team_slave_1 added [ 336.196921][T11445] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 336.204502][T11445] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 336.231907][T11445] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 336.321988][T11454] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 336.329434][T11454] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 336.355825][T11454] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 336.388261][T11457] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 336.395481][T11457] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 336.423722][T11457] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 336.446518][T11454] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 336.453600][T11454] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 336.479875][T11454] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 336.506738][T11457] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 336.513849][T11457] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 336.540644][T11457] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 336.585454][T11446] hsr_slave_0: entered promiscuous mode [ 336.591796][T11446] hsr_slave_1: entered promiscuous mode [ 336.598546][T11446] debugfs: 'hsr0' already exists in 'hsr' [ 336.604668][T11446] Cannot create hsr debugfs directory [ 336.629684][T11445] hsr_slave_0: entered promiscuous mode [ 336.636280][T11445] hsr_slave_1: entered promiscuous mode [ 336.642353][T11445] debugfs: 'hsr0' already exists in 'hsr' [ 336.649141][T11445] Cannot create hsr debugfs directory [ 336.761323][T11454] hsr_slave_0: entered promiscuous mode [ 336.767884][T11454] hsr_slave_1: entered promiscuous mode [ 336.775503][T11454] debugfs: 'hsr0' already exists in 'hsr' [ 336.781278][T11454] Cannot create hsr debugfs directory [ 336.801513][T11457] hsr_slave_0: entered promiscuous mode [ 336.808082][T11457] hsr_slave_1: entered promiscuous mode [ 336.814407][T11457] debugfs: 'hsr0' already exists in 'hsr' [ 336.820146][T11457] Cannot create hsr debugfs directory [ 337.182844][ T5649] Bluetooth: hci15: command tx timeout [ 337.343017][ T5649] Bluetooth: hci17: command tx timeout [ 337.353415][ T5649] Bluetooth: hci16: command tx timeout [ 337.583666][ T5650] Bluetooth: hci18: command tx timeout [ 337.663391][ T5650] Bluetooth: hci19: command tx timeout [ 339.263161][ T5650] Bluetooth: hci15: command tx timeout [ 339.423143][ T5650] Bluetooth: hci16: command tx timeout [ 339.423164][ T5635] Bluetooth: hci17: command tx timeout [ 339.584672][ T5635] Bluetooth: hci5: command 0x0406 tx timeout [ 339.593376][ T5650] Bluetooth: hci8: command 0x0406 tx timeout [ 339.597880][ T5635] Bluetooth: hci6: command 0x0406 tx timeout [ 339.600582][ T50] Bluetooth: hci7: command 0x0406 tx timeout [ 339.615932][ T50] Bluetooth: hci9: command 0x0406 tx timeout [ 339.663513][ T5643] Bluetooth: hci18: command tx timeout [ 339.743327][ T5643] Bluetooth: hci19: command tx timeout [ 341.342957][ T5643] Bluetooth: hci15: command tx timeout [ 341.503005][ T5643] Bluetooth: hci16: command tx timeout [ 341.503127][ T5649] Bluetooth: hci17: command tx timeout [ 341.743236][ T5649] Bluetooth: hci18: command tx timeout [ 341.822963][ T5649] Bluetooth: hci19: command tx timeout [ 352.868549][ T25] block nbd0: Possible stuck request ffff888027555240: control (read@1024,1024B). Runtime 240 seconds [ 352.879867][ T25] block nbd0: Possible stuck request ffff888027555400: control (read@2048,1024B). Runtime 240 seconds [ 352.891127][ T25] block nbd0: Possible stuck request ffff8880275555c0: control (read@3072,1024B). Runtime 240 seconds [ 352.902184][ T25] block nbd0: Possible stuck request ffff888027555080: control (read@0,1024B). Runtime 240 seconds [ 359.903090][ T30] INFO: task syz.2.1453:11215 blocked for more than 143 seconds. [ 359.914914][ T30] Not tainted syzkaller #0 [ 359.919882][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 359.928817][ T30] task:syz.2.1453 state:D stack:25440 pid:11215 tgid:11214 ppid:5629 task_flags:0x480140 flags:0x00080002 [ 359.940928][ T30] Call Trace: [ 359.944540][ T30] [ 359.947487][ T30] __schedule+0x1840/0x57a0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 359.952091][ T30] ? __pfx___schedule+0x10/0x10 [ 359.958290][ T30] ? schedule+0x90/0x360 [ 359.962588][ T30] schedule+0x164/0x360 [ 359.967199][ T30] blk_mq_freeze_queue_wait+0x101/0x180 [ 359.974292][ T30] ? __pfx_blk_mq_freeze_queue_wait+0x10/0x10 [ 359.998861][ T30] ? queue_limits_commit_update_frozen+0x55/0xd0 [ 360.022436][ T30] ? __pfx_autoremove_wake_function+0x10/0x10 [ 360.032136][ T30] queue_limits_commit_update_frozen+0x55/0xd0 [ 360.039006][ T30] nbd_set_size+0x454/0x680 [ 360.043787][ T30] ? __pfx_nbd_set_size+0x10/0x10 [ 360.048879][ T30] ? nla_memcpy+0x5b/0xc0 [ 360.056081][ T30] nbd_genl_reconfigure+0x7e9/0x1e80 [ 360.061457][ T30] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 360.068658][ T30] ? rcu_is_watching+0x15/0xb0 [ 360.074061][ T30] ? trace_kmalloc+0x2a/0xf0 [ 360.078717][ T30] ? __nla_parse+0x40/0x60 [ 360.083272][ T30] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 360.089764][ T30] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 360.096730][ T30] genl_family_rcv_msg_doit+0x233/0x340 [ 360.102324][ T30] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 360.108535][ T30] ? __lock_acquire+0x683/0x2cd0 [ 360.113562][ T30] genl_rcv_msg+0x614/0x7a0 [ 360.118068][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 360.123441][ T30] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 360.129193][ T30] netlink_rcv_skb+0x226/0x4a0 [ 360.134110][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 360.139156][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 360.146367][ T30] ? down_read+0x270/0x2e0 [ 360.150804][ T30] ? genl_rcv+0xd/0x40 [ 360.155272][ T30] genl_rcv+0x28/0x40 [ 360.159279][ T30] netlink_unicast+0x7bb/0x940 [ 360.164171][ T30] netlink_sendmsg+0x813/0xb40 [ 360.168964][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 360.174505][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 360.180321][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 360.185847][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 360.191149][ T30] ____sys_sendmsg+0x9b9/0xa20 [ 360.196188][ T30] ? __might_fault+0xaf/0x130 [ 360.200902][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 360.206416][ T30] ? import_iovec+0x73/0xa0 [ 360.210970][ T30] ___sys_sendmsg+0x2a5/0x360 [ 360.215987][ T30] ? __lock_acquire+0x683/0x2cd0 [ 360.220957][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 360.226431][ T30] ? futex_wake+0x4d7/0x5b0 [ 360.230989][ T30] ? __fget_files+0x2a/0x420 [ 360.235651][ T30] ? __fget_files+0x3a2/0x420 [ 360.240343][ T30] __x64_sys_sendmsg+0x1bd/0x2a0 [ 360.245670][ T30] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 360.251152][ T30] ? rcu_is_watching+0x15/0xb0 [ 360.256150][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.262257][ T30] do_syscall_64+0x174/0x580 [ 360.266913][ T30] ? trace_irq_disable+0x3b/0x140 [ 360.271952][ T30] ? clear_bhb_loop+0x40/0x90 [ 360.276907][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.283621][ T30] RIP: 0033:0x7fc14559ce59 [ 360.288080][ T30] RSP: 002b:00007fc146540028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 360.296679][ T30] RAX: ffffffffffffffda RBX: 00007fc145815fa0 RCX: 00007fc14559ce59 [ 360.305093][ T30] RDX: 0000000000008010 RSI: 0000200000000000 RDI: 0000000000000006 [ 360.313167][ T30] RBP: 00007fc145632d6f R08: 0000000000000000 R09: 0000000000000000 [ 360.321146][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 360.329200][ T30] R13: 00007fc145816038 R14: 00007fc145815fa0 R15: 00007fff604b71a8 [ 360.337473][ T30] [ 360.340516][ T30] INFO: task syz.1.1454:11218 blocked for more than 143 seconds. [ 360.348324][ T30] Not tainted syzkaller #0 [ 360.353304][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 360.361956][ T30] task:syz.1.1454 state:D stack:24648 pid:11218 tgid:11216 ppid:5637 task_flags:0x400140 flags:0x00080002 [ 360.374316][ T30] Call Trace: [ 360.377604][ T30] [ 360.381192][ T30] __schedule+0x1840/0x57a0 [ 360.385900][ T30] ? __lock_acquire+0x683/0x2cd0 [ 360.390863][ T30] ? __pfx___schedule+0x10/0x10 [ 360.395921][ T30] ? schedule+0x90/0x360 [ 360.400202][ T30] schedule+0x164/0x360 [ 360.404665][ T30] schedule_preempt_disabled+0x13/0x30 [ 360.410135][ T30] __mutex_lock+0x7c5/0x1590 [ 360.414899][ T30] ? __mutex_lock+0x5c5/0x1590 [ 360.419687][ T30] ? genl_rcv_msg+0x10b/0x7a0 [ 360.424509][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 360.429565][ T30] ? __dev_queue_xmit+0x29b/0x37f0 [ 360.435021][ T30] ? radix_tree_lookup+0x240/0x290 [ 360.440132][ T30] genl_rcv_msg+0x10b/0x7a0 [ 360.444692][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 360.449722][ T30] ? __pfx_ref_tracker_free+0x10/0x10 [ 360.455176][ T30] netlink_rcv_skb+0x226/0x4a0 [ 360.459953][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 360.465496][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 360.470810][ T30] ? down_read+0x270/0x2e0 [ 360.475278][ T30] ? genl_rcv+0xd/0x40 [ 360.479346][ T30] genl_rcv+0x28/0x40 [ 360.484087][ T30] netlink_unicast+0x7bb/0x940 [ 360.488891][ T30] netlink_sendmsg+0x813/0xb40 [ 360.493980][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 360.499277][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 360.504450][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 360.509768][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 360.515188][ T30] __sys_sendto+0x672/0x710 [ 360.519717][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 360.525083][ T30] ? exc_page_fault+0x6a/0xc0 [ 360.529773][ T30] ? do_user_addr_fault+0xc4a/0x1340 [ 360.535132][ T30] __x64_sys_sendto+0xde/0x100 [ 360.539909][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.546208][ T30] do_syscall_64+0x174/0x580 [ 360.550809][ T30] ? trace_irq_disable+0x3b/0x140 [ 360.556181][ T30] ? clear_bhb_loop+0x40/0x90 [ 360.560875][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.566860][ T30] RIP: 0033:0x7fe98975d68e [ 360.571287][ T30] RSP: 002b:00007fe9879f4e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 360.579767][ T30] RAX: ffffffffffffffda RBX: 00007fe9879f66c0 RCX: 00007fe98975d68e [ 360.588523][ T30] RDX: 0000000000000020 RSI: 00007fe9879f5000 RDI: 000000000000000a [ 360.596723][ T30] RBP: 0000000000000000 R08: 00007fe9879f4f04 R09: 000000000000000c [ 360.604797][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000a [ 360.613243][ T30] R13: 00007fe9879f4f58 R14: 00007fe9879f5000 R15: 0000000000000000 [ 360.621250][ T30] [ 360.624480][ T30] INFO: task syz.4.1452:11225 blocked for more than 144 seconds. [ 360.632217][ T30] Not tainted syzkaller #0 [ 360.637321][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 360.646178][ T30] task:syz.4.1452 state:D stack:24488 pid:11225 tgid:11221 ppid:5638 task_flags:0x400140 flags:0x00080002 [ 360.658169][ T30] Call Trace: [ 360.661452][ T30] [ 360.664471][ T30] __schedule+0x1840/0x57a0 [ 360.668990][ T30] ? __lock_acquire+0x683/0x2cd0 [ 360.674246][ T30] ? __pfx___schedule+0x10/0x10 [ 360.679106][ T30] ? schedule+0x90/0x360 [ 360.683442][ T30] schedule+0x164/0x360 [ 360.688286][ T30] schedule_preempt_disabled+0x13/0x30 [ 360.694105][ T30] __mutex_lock+0x7c5/0x1590 [ 360.698771][ T30] ? __mutex_lock+0x5c5/0x1590 [ 360.704091][ T30] ? genl_rcv_msg+0x10b/0x7a0 [ 360.708816][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 360.713921][ T30] ? __dev_queue_xmit+0x29b/0x37f0 [ 360.719048][ T30] ? radix_tree_lookup+0x240/0x290 [ 360.724364][ T30] genl_rcv_msg+0x10b/0x7a0 [ 360.728912][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 360.734335][ T30] ? __pfx_ref_tracker_free+0x10/0x10 [ 360.740123][ T30] netlink_rcv_skb+0x226/0x4a0 [ 360.745103][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 360.750177][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 360.755577][ T30] ? down_read+0x270/0x2e0 [ 360.760006][ T30] ? genl_rcv+0xd/0x40 [ 360.764374][ T30] genl_rcv+0x28/0x40 [ 360.768352][ T30] netlink_unicast+0x7bb/0x940 [ 360.773197][ T30] netlink_sendmsg+0x813/0xb40 [ 360.777980][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 360.783551][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 360.788532][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 360.795529][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 360.800862][ T30] __sys_sendto+0x672/0x710 [ 360.805529][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 360.810737][ T30] ? exc_page_fault+0x6a/0xc0 [ 360.815595][ T30] ? do_user_addr_fault+0xc4a/0x1340 [ 360.820917][ T30] __x64_sys_sendto+0xde/0x100 [ 360.826008][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.832091][ T30] do_syscall_64+0x174/0x580 [ 360.836857][ T30] ? trace_irq_disable+0x3b/0x140 [ 360.841924][ T30] ? clear_bhb_loop+0x40/0x90 [ 360.846770][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.852693][ T30] RIP: 0033:0x7f9246f5d68e [ 360.857153][ T30] RSP: 002b:00007f9247d9fe88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 360.866533][ T30] RAX: ffffffffffffffda RBX: 00007f9247da16c0 RCX: 00007f9246f5d68e [ 360.874671][ T30] RDX: 0000000000000020 RSI: 00007f9247da0000 RDI: 0000000000000006 [ 360.882650][ T30] RBP: 0000000000000000 R08: 00007f9247d9ff04 R09: 000000000000000c [ 360.891005][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 360.899886][ T30] R13: 00007f9247d9ff58 R14: 00007f9247da0000 R15: 0000000000000000 [ 360.908034][ T30] [ 360.911192][ T30] INFO: task syz.0.1458:11244 blocked for more than 144 seconds. [ 360.919039][ T30] Not tainted syzkaller #0 [ 360.924156][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 360.932870][ T30] task:syz.0.1458 state:D stack:28808 pid:11244 tgid:11239 ppid:5630 task_flags:0x400040 flags:0x00080002 [ 360.944975][ T30] Call Trace: [ 360.948275][ T30] [ 360.951222][ T30] __schedule+0x1840/0x57a0 [ 360.956069][ T30] ? __lock_acquire+0x683/0x2cd0 [ 360.961047][ T30] ? __pfx___schedule+0x10/0x10 [ 360.965973][ T30] ? schedule+0x90/0x360 [ 360.970245][ T30] schedule+0x164/0x360 [ 360.974455][ T30] schedule_preempt_disabled+0x13/0x30 [ 360.979927][ T30] __mutex_lock+0x7c5/0x1590 [ 360.984816][ T30] ? __mutex_lock+0x5c5/0x1590 [ 360.989579][ T30] ? genl_rcv_msg+0x10b/0x7a0 [ 360.994402][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 360.999978][ T30] ? __lock_acquire+0x683/0x2cd0 [ 361.005040][ T30] ? radix_tree_lookup+0x240/0x290 [ 361.010196][ T30] genl_rcv_msg+0x10b/0x7a0 [ 361.015096][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 361.020144][ T30] netlink_rcv_skb+0x226/0x4a0 [ 361.025081][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 361.030146][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 361.035505][ T30] ? down_read+0x270/0x2e0 [ 361.039934][ T30] ? genl_rcv+0xd/0x40 [ 361.044280][ T30] genl_rcv+0x28/0x40 [ 361.048269][ T30] netlink_unicast+0x7bb/0x940 [ 361.053115][ T30] netlink_sendmsg+0x813/0xb40 [ 361.057898][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 361.063444][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 361.068416][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 361.073995][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 361.079301][ T30] __sys_sendto+0x672/0x710 [ 361.083869][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 361.088931][ T30] ? exc_page_fault+0x6a/0xc0 [ 361.093662][ T30] ? do_user_addr_fault+0xc4a/0x1340 [ 361.099436][ T30] __x64_sys_sendto+0xde/0x100 [ 361.104805][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.110907][ T30] do_syscall_64+0x174/0x580 [ 361.115527][ T30] ? trace_irq_disable+0x3b/0x140 [ 361.120559][ T30] ? clear_bhb_loop+0x40/0x90 [ 361.125348][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.131246][ T30] RIP: 0033:0x7fb884d5d68e [ 361.135927][ T30] RSP: 002b:00007fb885b73e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 361.144403][ T30] RAX: ffffffffffffffda RBX: 00007fb885b756c0 RCX: 00007fb884d5d68e [ 361.152375][ T30] RDX: 0000000000000020 RSI: 00007fb885b74000 RDI: 0000000000000006 [ 361.160392][ T30] RBP: 0000000000000000 R08: 00007fb885b73f04 R09: 000000000000000c [ 361.168578][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 361.176616][ T30] R13: 00007fb885b73f58 R14: 00007fb885b74000 R15: 0000000000000000 [ 361.184929][ T30] [ 361.188000][ T30] INFO: task syz.3.1459:11242 blocked for more than 144 seconds. [ 361.196045][ T30] Not tainted syzkaller #0 [ 361.201600][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 361.210359][ T30] task:syz.3.1459 state:D stack:26480 pid:11242 tgid:11241 ppid:5640 task_flags:0x400140 flags:0x00080002 [ 361.222453][ T30] Call Trace: [ 361.226155][ T30] [ 361.229117][ T30] __schedule+0x1840/0x57a0 [ 361.233744][ T30] ? __lock_acquire+0x683/0x2cd0 [ 361.238767][ T30] ? __pfx___schedule+0x10/0x10 [ 361.243712][ T30] ? schedule+0x90/0x360 [ 361.247990][ T30] schedule+0x164/0x360 [ 361.252138][ T30] schedule_preempt_disabled+0x13/0x30 [ 361.257861][ T30] __mutex_lock+0x7c5/0x1590 [ 361.262479][ T30] ? __mutex_lock+0x5c5/0x1590 [ 361.267647][ T30] ? genl_rcv_msg+0x10b/0x7a0 [ 361.272381][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 361.277476][ T30] ? __dev_queue_xmit+0x29b/0x37f0 [ 361.282604][ T30] ? radix_tree_lookup+0x240/0x290 [ 361.288092][ T30] genl_rcv_msg+0x10b/0x7a0 [ 361.292635][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 361.297708][ T30] ? __pfx_ref_tracker_free+0x10/0x10 [ 361.303784][ T30] netlink_rcv_skb+0x226/0x4a0 [ 361.308575][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 361.313873][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 361.319212][ T30] ? down_read+0x270/0x2e0 [ 361.323763][ T30] ? genl_rcv+0xd/0x40 [ 361.327855][ T30] genl_rcv+0x28/0x40 [ 361.331820][ T30] netlink_unicast+0x7bb/0x940 [ 361.336698][ T30] netlink_sendmsg+0x813/0xb40 [ 361.341501][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 361.347352][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 361.352342][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 361.357683][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 361.363076][ T30] __sys_sendto+0x672/0x710 [ 361.367636][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 361.372682][ T30] ? exc_page_fault+0x6a/0xc0 [ 361.377490][ T30] ? do_user_addr_fault+0xc4a/0x1340 [ 361.383086][ T30] __x64_sys_sendto+0xde/0x100 [ 361.387866][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.393988][ T30] do_syscall_64+0x174/0x580 [ 361.398587][ T30] ? trace_irq_disable+0x3b/0x140 [ 361.403683][ T30] ? clear_bhb_loop+0x40/0x90 [ 361.408819][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.415011][ T30] RIP: 0033:0x7f3cb6b5d68e [ 361.419532][ T30] RSP: 002b:00007f3cb7ae5e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 361.428598][ T30] RAX: ffffffffffffffda RBX: 00007f3cb7ae76c0 RCX: 00007f3cb6b5d68e [ 361.436807][ T30] RDX: 0000000000000020 RSI: 00007f3cb7ae6000 RDI: 0000000000000007 [ 361.445080][ T30] RBP: 0000000000000000 R08: 00007f3cb7ae5f04 R09: 000000000000000c [ 361.453143][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 361.461120][ T30] R13: 00007f3cb7ae5f58 R14: 00007f3cb7ae6000 R15: 0000000000000000 [ 361.469161][ T30] [ 361.472268][ T30] [ 361.472268][ T30] Showing all locks held in the system: [ 361.480597][ T30] 1 lock held by khungtaskd/30: [ 361.485501][ T30] #0: ffffffff8e95c780 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 361.495488][ T30] 2 locks held by getty/5385: [ 361.500164][ T30] #0: ffff8880369f10a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 361.511354][ T30] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1380 [ 361.521555][ T30] 1 lock held by udevd/5639: [ 361.526211][ T30] #0: ffff888027475350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xde/0xd70 [ 361.535622][ T30] 6 locks held by syz.2.1453/11215: [ 361.540798][ T30] #0: ffffffff8fe2fea8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 361.549144][ T30] #1: ffffffff8fe2fce0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 361.558195][ T30] #2: ffff888027482a60 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_reconfigure+0x4bc/0x1e80 [ 361.568824][ T30] #3: ffff888026c85a68 (&q->limits_lock){+.+.}-{4:4}, at: nbd_set_size+0x263/0x680 [ 361.578275][ T30] #4: ffff888026c85430 (&q->q_usage_counter(io)#49){++++}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0 [ 361.590468][ T30] #5: ffff888026c85468 (&q->q_usage_counter(queue)#33){+.+.}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0 [ 361.603199][ T30] 2 locks held by syz.1.1454/11218: [ 361.608410][ T30] #0: ffffffff8fe2fea8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 361.617437][ T30] #1: ffffffff8fe2fce0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 361.626531][ T30] 2 locks held by syz.4.1452/11225: [ 361.631729][ T30] #0: ffffffff8fe2fea8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 361.640175][ T30] #1: ffffffff8fe2fce0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 361.649211][ T30] 2 locks held by syz.0.1458/11244: [ 361.654565][ T30] #0: ffffffff8fe2fea8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 361.663330][ T30] #1: ffffffff8fe2fce0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 361.672321][ T30] 2 locks held by syz.3.1459/11242: [ 361.677596][ T30] #0: ffffffff8fe2fea8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 361.685833][ T30] #1: ffffffff8fe2fce0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 361.695081][ T30] 2 locks held by syz-executor/11251: [ 361.700473][ T30] #0: ffffffff8fe2fea8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 361.708696][ T30] #1: ffffffff8fe2fce0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 361.718211][ T30] 2 locks held by syz-executor/11255: [ 361.723936][ T30] #0: ffffffff8fe2fea8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 361.732156][ T30] #1: ffffffff8fe2fce0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 361.741285][ T30] 2 locks held by syz-executor/11257: [ 361.746919][ T30] #0: ffffffff8fe2fea8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 361.755439][ T30] #1: ffffffff8fe2fce0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 361.764582][ T30] 2 locks held by syz-executor/11263: [ 361.769972][ T30] #0: ffffffff8fe2fea8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 361.778220][ T30] #1: ffffffff8fe2fce0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 361.787462][ T30] 2 locks held by syz-executor/11269: [ 361.792888][ T30] #0: ffffffff8fe2fea8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 361.801093][ T30] #1: ffffffff8fe2fce0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 361.810124][ T30] 2 locks held by syz-executor/11347: [ 361.816099][ T30] #0: ffffffff8fe2fea8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 361.824493][ T30] #1: ffffffff8fe2fce0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 361.833552][ T30] 2 locks held by syz-executor/11349: [ 361.838922][ T30] #0: ffffffff8fe2fea8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 361.847546][ T30] #1: ffffffff8fe2fce0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 361.856573][ T30] 2 locks held by syz-executor/11350: [ 361.861927][ T30] #0: ffffffff8fe2fea8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 361.870163][ T30] #1: ffffffff8fe2fce0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 361.879446][ T30] 2 locks held by syz-executor/11352: [ 361.884845][ T30] #0: ffffffff8fe2fea8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 361.893103][ T30] #1: ffffffff8fe2fce0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 361.902091][ T30] 2 locks held by syz-executor/11364: [ 361.908176][ T30] #0: ffffffff8fe2fea8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 361.917150][ T30] #1: ffffffff8fe2fce0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 361.926221][ T30] 2 locks held by syz-executor/11442: [ 361.931590][ T30] #0: ffffffff8fe2fea8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 361.940027][ T30] #1: ffffffff8fe2fce0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 361.949060][ T30] 2 locks held by syz-executor/11445: [ 361.954461][ T30] #0: ffffffff8fe2fea8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 361.962625][ T30] #1: ffffffff8fe2fce0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 361.971866][ T30] 2 locks held by syz-executor/11446: [ 361.977286][ T30] #0: ffffffff8fe2fea8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 361.985627][ T30] #1: ffffffff8fe2fce0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 361.994788][ T30] 2 locks held by syz-executor/11454: [ 362.000152][ T30] #0: ffffffff8fe2fea8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 362.008416][ T30] #1: ffffffff8fe2fce0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 362.017444][ T30] 2 locks held by syz-executor/11457: [ 362.023782][ T30] #0: ffffffff8fe2fea8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 362.032027][ T30] #1: ffffffff8fe2fce0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 362.041386][ T30] [ 362.043804][ T30] ============================================= [ 362.043804][ T30] [ 362.052216][ T30] NMI backtrace for cpu 1 [ 362.052234][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 362.052246][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 362.052252][ T30] Call Trace: [ 362.052257][ T30] [ 362.052262][ T30] dump_stack_lvl+0xe8/0x150 [ 362.052283][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 362.052297][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 362.052314][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 362.052327][ T30] sys_info+0x135/0x170 [ 362.052338][ T30] watchdog+0xfd7/0x1030 [ 362.052355][ T30] ? watchdog+0x1c7/0x1030 [ 362.052372][ T30] kthread+0x389/0x470 [ 362.052384][ T30] ? __pfx_watchdog+0x10/0x10 [ 362.052398][ T30] ? __pfx_kthread+0x10/0x10 [ 362.052412][ T30] ret_from_fork+0x514/0xb70 [ 362.052424][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 362.052434][ T30] ? __switch_to+0xc89/0x1420 [ 362.052449][ T30] ? __pfx_kthread+0x10/0x10 [ 362.052461][ T30] ret_from_fork_asm+0x1a/0x30 [ 362.052480][ T30] [ 362.052484][ T30] Sending NMI from CPU 1 to CPUs 0: [ 362.164035][ C0] NMI backtrace for cpu 0 [ 362.164052][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 362.164068][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 362.164077][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 362.164105][ C0] Code: ab 83 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 83 12 27 00 fb f4 7c ff 02 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 362.164118][ C0] RSP: 0018:ffffffff8e607dc0 EFLAGS: 00000242 [ 362.164132][ C0] RAX: 00000000001eeeb3 RBX: ffffffff819a301a RCX: 0000000080000001 [ 362.164143][ C0] RDX: 0000000000000001 RSI: ffffffff8dfa1aa6 RDI: ffffffff8c2899a0 [ 362.164154][ C0] RBP: ffffffff8e607eb8 R08: ffff8880b86339db R09: 1ffff110170c673b [ 362.164165][ C0] R10: dffffc0000000000 R11: ffffed10170c673c R12: 0000000000000000 [ 362.164176][ C0] R13: 1ffffffff1cd25d8 R14: 0000000000000000 R15: 1ffffffff1cd25d8 [ 362.164186][ C0] FS: 0000000000000000(0000) GS:ffff8881252b9000(0000) knlGS:0000000000000000 [ 362.164199][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 362.164209][ C0] CR2: 0000557e3d2dfee8 CR3: 000000000e74a000 CR4: 00000000003526f0 [ 362.164223][ C0] Call Trace: [ 362.164229][ C0] [ 362.164234][ C0] default_idle+0x9/0x20 [ 362.164250][ C0] default_idle_call+0x72/0xb0 [ 362.164267][ C0] do_idle+0x36a/0x5f0 [ 362.164282][ C0] ? asm_sysvec_call_function_single+0x1a/0x20 [ 362.164302][ C0] ? __pfx_do_idle+0x10/0x10 [ 362.164323][ C0] cpu_startup_entry+0x43/0x60 [ 362.164342][ C0] rest_init+0x2de/0x300 [ 362.164359][ C0] start_kernel+0x38a/0x3e0 [ 362.164381][ C0] x86_64_start_reservations+0x24/0x30 [ 362.164400][ C0] x86_64_start_kernel+0x137/0x1b0 [ 362.164417][ C0] common_startup_64+0x13e/0x147 [ 362.164443][ C0] [ 362.348360][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 362.355198][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 362.364325][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 362.374365][ T30] Call Trace: [ 362.377630][ T30] [ 362.380545][ T30] vpanic+0x56c/0xa60 [ 362.384516][ T30] ? __pfx___schedule+0x10/0x10 [ 362.389363][ T30] ? __pfx_vpanic+0x10/0x10 [ 362.393890][ T30] ? nmi_trigger_cpumask_backtrace+0x1f4/0x300 [ 362.400041][ T30] panic+0xc5/0xd0 [ 362.403752][ T30] ? __pfx_panic+0x10/0x10 [ 362.408193][ T30] ? preempt_schedule_common+0x82/0xd0 [ 362.413651][ T30] ? preempt_schedule_thunk+0x16/0x30 [ 362.419017][ T30] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 362.425166][ T30] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 362.431313][ T30] watchdog+0x1030/0x1030 [ 362.435645][ T30] ? watchdog+0x1c7/0x1030 [ 362.440060][ T30] kthread+0x389/0x470 [ 362.444134][ T30] ? __pfx_watchdog+0x10/0x10 [ 362.448813][ T30] ? __pfx_kthread+0x10/0x10 [ 362.453405][ T30] ret_from_fork+0x514/0xb70 [ 362.458030][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 362.463147][ T30] ? __switch_to+0xc89/0x1420 [ 362.467826][ T30] ? __pfx_kthread+0x10/0x10 [ 362.472438][ T30] ret_from_fork_asm+0x1a/0x30 [ 362.477204][ T30] [ 362.480489][ T30] Kernel Offset: disabled [ 362.484803][ T30] Rebooting in 86400 seconds..